Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
91
GitHub Actions
54
Go
4,194
Maven
5,000+
npm
5,000+
NuGet
1,021
pip
5,000+
Pub
13
RubyGems
1,102
Rust
1,422
Swift
61
Unreviewed advisories
All unreviewed
5,000+

62 advisories

Loading
fixurjavainstall: Previous Fuji versions can accidentally wipe `/usr/share/man/man8` Low
GHSA-fq3w-p4fg-mw73 was published for fixurjavainstall (Rust) Jun 25, 2026
EpicVon2468 Credited to EpicVon2468
The ai_cmd utility executes with full root permissions. It pipes socket inputs directly to popen(... High Unreviewed
CVE-2026-49188 was published Jun 4, 2026
stigmem-node's federation insecure transport settings may allow non-loopback cleartext federation Critical
GHSA-jmfc-hfjq-pxcp was published for stigmem-node (pip) May 29, 2026
Algernon: Single-file mode unconditionally enables debug mode High
CVE-2026-45728 was published for github.com/xyproto/algernon (Go) May 19, 2026
Dredsen Credited to Dredsen
Unfurl through 2025.08 contains an improper input validation vulnerability in config parsing that... Critical Unreviewed
CVE-2026-40035 was published Apr 9, 2026
Development and test API endpoints are present that mirror production functionality. Moderate Unreviewed
CVE-2026-32662 was published Apr 3, 2026
Digital Photo Frame GH-WDF10A provided by GREEN HOUSE CO., LTD. contains an active debug code... High Unreviewed
CVE-2026-33201 was published Mar 26, 2026
Sprig Plugin for Craft CMS potentially discloses sensitive information via Sprig Playground Moderate
CVE-2026-27131 was published for putyourlightson/craft-sprig (Composer) Mar 23, 2026
Neosprings Credited to Neosprings and bencroker bencroker bencroker
Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure) Critical
GHSA-vg9h-jx4v-cwx2 was published for dfir-unfurl (pip) Jan 29, 2026
mobasi-team Credited to mobasi-team
A vulnerability exists in serial device servers where active debug code remains enabled in the... High Unreviewed
CVE-2025-15017 was published Dec 31, 2025
Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal, an... Moderate Unreviewed
CVE-2025-42872 was published Dec 9, 2025
The Ubuntu edk2 UEFI firmware packages accidentally allowed the UEFI Shell to be accessed in... Low Unreviewed
CVE-2025-2486 was published Nov 26, 2025
Smart Video Doorbell firmware versions prior to 2.01.078 contain an active debug code... High Unreviewed
CVE-2025-64983 was published Nov 26, 2025
An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3,... Moderate Unreviewed
CVE-2025-54660 was published Nov 18, 2025
Active debug code for some Intel UEFI reference platforms within Ring 0: Kernel may allow a... High Unreviewed
CVE-2025-30185 was published Nov 11, 2025
A vulnerability was identified in certain UniFi Talk devices where internal debugging... High Unreviewed
CVE-2025-52663 was published Oct 31, 2025
An authenticated admin user with access to both the management WebUI and command line interface... High Unreviewed
CVE-2025-4106 was published Oct 25, 2025
There is a possible escalation of privilege due to test/debugging code left in a production build... High Unreviewed
CVE-2025-36899 was published Sep 4, 2025
Information disclosure while capturing logs as eSE debug messages are logged. Moderate Unreviewed
CVE-2025-21472 was published Aug 6, 2025
: Active Debug Code vulnerability in ABB Switch Actuator 4 DU-83330, ABB Switch actuator, door... High Unreviewed
CVE-2025-7705 was published Jul 22, 2025
An open debug interface was reported in the Legion Space software included on certain Legion... Moderate Unreviewed
CVE-2025-1479 was published May 30, 2025
NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended... Low Unreviewed
CVE-2025-46674 was published Apr 27, 2025
A vulnerability was found in Netis WF-2404 1.1.124EN. It has been declared as critical. This... High Unreviewed
CVE-2025-2919 was published Mar 28, 2025
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC... High Unreviewed
CVE-2024-53648 was published Feb 11, 2025
The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to authentication bypass due to... Critical Unreviewed
CVE-2024-9643 was published Feb 4, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database