Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,407
Maven
5,000+
npm
5,000+
NuGet
1,048
pip
5,000+
Pub
13
RubyGems
1,127
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+

646 advisories

Loading
claude-mem: The computeObservationContentHash Function is Vulnerable to Hash Collision Low
CVE-2026-11330 was published for claude-mem (npm) Jun 5, 2026
A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the... Low Unreviewed
CVE-2026-11329 was published Jun 5, 2026
milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery Low
CVE-2026-10814 was published for github.com/milvus-io/milvus (Go) Jun 4, 2026
LMCache: 16-bit multimodal hash collision can poison KV cache entries Low
CVE-2026-10813 was published for lmcache (pip) Jun 4, 2026
GPTCache: File and image cache keys collide because BufferedReader.peek() only reads the buffered prefix Low
CVE-2026-10812 was published for gptcache (pip) Jun 4, 2026
MLflow: Deterministic sampling in dataset digest enables predictable collisions Low
CVE-2026-10803 was published for mlflow (pip) Jun 4, 2026
Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission Low
CVE-2026-10804 was published for streamlit (pip) Jun 4, 2026
A weakness has been identified in PaddlePaddle FastDeploy up to 2.4.1. Affected by this issue is... Low Unreviewed
CVE-2026-10800 was published Jun 4, 2026
ms-swift: Image Cache Hash Collision via Missing Dimension Metadata Low
CVE-2026-10801 was published for ms-swift (pip) Jun 4, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs Low
CVE-2026-10783 was published for gradio (pip) Jun 4, 2026
mlrun: DataFrame hash collisions can cause dataset artifact path conflicts and silent data corruption Low
CVE-2026-10766 was published for mlrun (pip) Jun 3, 2026
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication... High Unreviewed
CVE-2026-36609 was published Jun 3, 2026
Weak authentication between the Wireless Control Module (WCM) and the Engine Control Module (ECM)... Moderate Unreviewed
CVE-2026-49323 was published May 29, 2026
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic... Moderate Unreviewed
CVE-2025-46371 was published May 26, 2026
Netatalk 1.5.0 through 4.2.2 uses a broken cryptographic algorithm in the DHCAST128 UAM, which... High Unreviewed
CVE-2026-44053 was published May 21, 2026
HAXcms: Private Key Disclosure via Broken HMAC Implementation Critical
CVE-2026-46395 was published for @haxtheweb/haxcms-nodejs (npm) May 19, 2026
shreyas-challa Credited to shreyas-challa
Sulu: Weak Cryptographical usage for API Key generation and Reset Tokens Moderate
CVE-2026-45701 was published for sulu/sulu (Composer) May 18, 2026
gangadhar-s-k Credited to gangadhar-s-k, mamazu, alexander-schranz, and Prokyonn mamazu mamazu
alexander-schranz alexander-schranz Prokyonn Prokyonn
A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2. Impacted is the... Moderate Unreviewed
CVE-2026-8803 was published May 18, 2026
Insecure generation of credentials in the local SAT (Technical Support) access functionality of... Critical Unreviewed
CVE-2026-8072 was published May 12, 2026
This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow... High Unreviewed
CVE-2026-6411 was published May 8, 2026
Paramiko rsakey.py allows the SHA-1 algorithm Low
CVE-2026-44405 was published for paramiko (pip) May 6, 2026
Langchain-Chatchat Uses a Broken or Risky Cryptographic Algorithm Low
CVE-2026-7845 was published for langchain-chatchat (pip) May 5, 2026
A vulnerability was determined in code-projects Chat System 1.0. Affected is an unknown function... Moderate Unreviewed
CVE-2026-7103 was published Apr 27, 2026
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container... Moderate Unreviewed
CVE-2026-5926 was published Apr 23, 2026
Gitea has insecure default SSH settings Moderate
GHSA-3m6q-h5gj-7mrw was published for code.gitea.io/gitea (Go) Apr 22, 2026
gnzsnz Credited to gnzsnz
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database