Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

286 advisories

Loading
Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store... Moderate Unreviewed
CVE-2026-116198 was published Oct 25, 2026
A vulnerability could allow an attacker with access to an encrypted project file to retrieve... Moderate Unreviewed
CVE-2026-43854 was published Oct 20, 2026
Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of... Moderate Unreviewed
CVE-2026-86375 was published Oct 19, 2026
DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth... Critical Unreviewed
CVE-2026-77812 was published Aug 21, 2026
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of... High Unreviewed
CVE-2026-78860 was published Oct 5, 2026
Applications built on MongoDB Entity Framework Core Provider which place a database name in the... Moderate Unreviewed
CVE-2026-92757 was published Sep 17, 2026
Applications built on MongoDB Entity Framework Core Provider which combine independent encryption... Moderate Unreviewed
CVE-2026-92756 was published Sep 17, 2026
Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job... Moderate Unreviewed
CVE-2026-84676 was published Sep 2, 2026
openssl_encrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in the... High Unreviewed
CVE-2026-81688 was published Aug 27, 2026
openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 advertise a portable USB... Critical Unreviewed
CVE-2026-81681 was published Aug 27, 2026
Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent... High Unreviewed
CVE-2026-21079 was published Aug 10, 2026
CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to encrypt the initramfs contents,... High Unreviewed
CVE-2025-59325 was published Aug 12, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS... High Unreviewed
CVE-2026-20157 was published Jul 15, 2026
BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue. High Unreviewed
CVE-2022-26281 was published Apr 6, 2022
An insecure communication was found between a user and the Orpak SiteOmat management console for... Critical Unreviewed
CVE-2017-14852 was published May 24, 2022
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all... Moderate Unreviewed
CVE-2020-7567 was published May 24, 2022
When saving HSTS data to an excessively long file name, curl could end up removing all contents,... Moderate Unreviewed
CVE-2023-46219 was published Dec 12, 2023
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.6.0 could allow a remote attacker to... Moderate Unreviewed
CVE-2021-39090 was published Feb 29, 2024
Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what... High Unreviewed
CVE-2023-4537 was published Feb 15, 2024
B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography... High Unreviewed
CVE-2024-0220 was published Feb 22, 2024
IBM Watson CP4D Data Stores 4.6.0, 4.6.1, 4.6.2, and 4.6.3 does not encrypt sensitive or critical... Moderate Unreviewed
CVE-2023-27291 was published Mar 3, 2024
Some VX800v v1.0 web interface endpoints transmit sensitive information over unencrypted HTTP due... Moderate Unreviewed
CVE-2025-15548 was published Jan 29, 2026
When a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS... High Unreviewed
CVE-2025-13053 was published Dec 12, 2025
A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with... High Unreviewed
CVE-2025-13453 was published Jan 15, 2026
Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X.... Critical Unreviewed
CVE-2025-36751 was published Dec 13, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database