Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,407
Maven
5,000+
npm
5,000+
NuGet
1,048
pip
5,000+
Pub
13
RubyGems
1,127
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+

646 advisories

Loading
HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this... Low Unreviewed
CVE-2026-56582 was published Jul 21, 2026
SurrealDB before 3.1.0 silently substitutes the ES384 algorithm when a JWT access method is... Moderate Unreviewed
CVE-2026-63761 was published Jul 20, 2026
HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and... Moderate Unreviewed
CVE-2026-56454 was published Jul 16, 2026
A security vulnerability has been detected in wandb 0.25.2.dev1. Affected is the function... Low Unreviewed
CVE-2026-15605 was published Jul 14, 2026
Better Auth has insecure cryptographic defaults in oidcProvider: alg=none advertised and plain PKCE accepted by default High
GHSA-9h47-pqcx-hjr4 was published for better-auth (npm) Jul 7, 2026
subhanUmer Credited to subhanUmer
A security flaw has been discovered in exo-explore exo up to 1.0.71. Affected is the function... Low Unreviewed
CVE-2026-14738 was published Jul 5, 2026
A vulnerability was determined in langchain-ai langgraph up to 1.2.4. The affected element is the... Low Unreviewed
CVE-2026-14742 was published Jul 5, 2026
A vulnerability has been found in ForceInjection AI-fundermentals 2.0/3.0. Affected by this... Low Unreviewed
CVE-2026-14630 was published Jul 4, 2026
Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding Low
CVE-2026-50268 was published for Steeltoe.Configuration.Encryption (NuGet) Jul 2, 2026
SurrealDB: ES512 silently downgraded to ES384 due to jsonwebtoken crate limitation Moderate
GHSA-fwg2-gr34-q3w8 was published for surrealdb (Rust) Jul 1, 2026
q1uf3ng Credited to q1uf3ng
Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions... Moderate Unreviewed
CVE-2026-57997 was published Jun 30, 2026
A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an... Low Unreviewed
CVE-2026-13510 was published Jun 29, 2026
A vulnerability was detected in skypilot-org skypilot up to 0.12.0. Impacted is the function... Low Unreviewed
CVE-2026-13482 was published Jun 28, 2026
The Setracker2 Android Companion App (com.tgelec.setracker) versions 3.1.5 and earlier uses MD5... High Unreviewed
CVE-2026-9221 was published Jun 26, 2026
The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the... Moderate Unreviewed
CVE-2026-6330 was published Jun 26, 2026
Certificate policy and RFC 8446 compliance concerns regarding the continued acceptance of SHA-1... Low Unreviewed
CVE-2026-6412 was published Jun 25, 2026
ML-KEM-1024 x64 AVX2 implicit rejection failure in the Fujisaki-Okamoto transform breaks IND-CCA2... Moderate Unreviewed
CVE-2026-10097 was published Jun 25, 2026
CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass Low
CVE-2026-54780 was published for CoreWCF.Primitives (NuGet) Jun 19, 2026
Dell PowerFlex Manager, version(s) 4.6.0.1, contain(s) an Use of a Broken or Risky Cryptographic... Moderate Unreviewed
CVE-2026-40641 was published Jun 17, 2026
Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier High Unreviewed
CVE-2026-9261 was published Jun 16, 2026
The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against... Critical Unreviewed
CVE-2026-50086 was published Jun 12, 2026
Wss4jSecurityInterceptor defaulted allowRSA15KeyTransportAlgorithm to true, overriding Apache... Moderate Unreviewed
CVE-2026-40996 was published Jun 11, 2026
During an internal security assessment, a potential vulnerability was discovered in some ThinkPad... High Unreviewed
CVE-2025-10237 was published Jun 10, 2026
A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown... Low Unreviewed
CVE-2026-11479 was published Jun 8, 2026
A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the... Low Unreviewed
CVE-2026-11481 was published Jun 8, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database