Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

70 advisories

Loading
Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. ... Moderate Unreviewed
CVE-2026-85243 was published Oct 19, 2026
Distribution: Client `manifests.Get()` does not verify returned content against requested digest Moderate
CVE-2026-85747 was published for github.com/distribution/distribution/v3 (Go) Oct 15, 2026
KrisKennawayDD Credited to KrisKennawayDD
Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip... Moderate Unreviewed
CVE-2026-109366 was published Oct 12, 2026
Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security... Moderate Unreviewed
CVE-2026-84900 was published Oct 5, 2026
NetX Secure TLS accepts an empty application-data record without verifying its message... Moderate Unreviewed
CVE-2026-102759 was published Sep 29, 2026
The Tauri updater plugin verifies update binaries using minisign signatures, but the signature... Moderate Unreviewed
CVE-2026-95625 was published Sep 23, 2026
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption... Moderate Unreviewed
CVE-2026-20354 was published Sep 2, 2026
In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical... Moderate Unreviewed
CVE-2026-56416 was published Jul 22, 2026
pnpm Has an Integrity Check Bypass via Missing Lockfile Integrity Field Moderate
CVE-2026-50021 was published for pnpm (npm) Jun 26, 2026
tempcollab Credited to tempcollab
wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard the message when the key length exceeds the... Moderate Unreviewed
CVE-2026-8720 was published Jun 26, 2026
Improper Validation of Integrity Check Value vulnerability in Apache APISIX. The jwe-decrypt... Moderate Unreviewed
CVE-2026-49230 was published Jun 19, 2026
Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler Moderate
CVE-2026-8597 was published for sagemaker (pip) May 21, 2026
Bouncy Castle LTS native GCM chunking can cause bad-tag exception on decryption Moderate
CVE-2026-8149 was published for org.bouncycastle:bcprov-lts8on (Maven) May 8, 2026
discerningdev Credited to discerningdev
A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover... Moderate Unreviewed
CVE-2026-5504 was published Apr 10, 2026
rPGP's integrity protection of encrypted data was not always checked Moderate
GHSA-c7ph-f7jm-xv4w was published for pgp (Rust) Feb 13, 2026
go-git improperly verifies data integrity values for .idx and .pack files Moderate
CVE-2026-25934 was published for github.com/go-git/go-git/v5 (Go) Feb 10, 2026
N0zoM1z0 Credited to N0zoM1z0
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause... Moderate Unreviewed
CVE-2025-33193 was published Nov 25, 2025
An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for... Moderate Unreviewed
CVE-2025-4418 was published Jun 12, 2025
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is... Moderate Unreviewed
CVE-2025-3479 was published Apr 17, 2025
The Contact Form 7 plugin for WordPress is vulnerable to Order Replay in all versions up to, and... Moderate Unreviewed
CVE-2025-3247 was published Apr 16, 2025
An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2... Moderate Unreviewed
CVE-2024-47573 was published Mar 14, 2025
Improper Validation of Integrity Check Value vulnerability in TXOne Networks StellarProtect ... Moderate Unreviewed
CVE-2024-47935 was published Feb 17, 2025
There is an insufficient integrity vulnerability in Huawei products. A module does not perform... Moderate Unreviewed
CVE-2020-9210 was published Dec 27, 2024
A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI Relying... Moderate Unreviewed
CVE-2024-56169 was published Dec 18, 2024
Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16... Moderate Unreviewed
CVE-2024-49406 was published Nov 6, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database