Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,863
Maven
5,000+
npm
5,000+
NuGet
1,131
pip
5,000+
Pub
13
RubyGems
1,158
Rust
1,585
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20

1,529 advisories

Loading
Nuxt dev server vite-node IPC socket is world-connectable on Linux Moderate
CVE-2026-56301 was published for nuxt (npm) Jun 16, 2026
alcls01111 Credited to alcls01111
Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and... Moderate Unreviewed
CVE-2026-50255 was published Jun 16, 2026
Incorrect default permissions in Kiro IDE on macOS and Linux before version 0.11.133 could expose... Moderate Unreviewed
CVE-2026-11931 was published Jun 15, 2026
Apache ActiveMQ has an Incorrect Default Permissions vulnerability High
CVE-2026-49157 was published for org.apache.activemq:apache-activemq (Maven) Jun 1, 2026
An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module... Low Unreviewed
CVE-2026-48190 was published Jun 1, 2026
An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above)... Low Unreviewed
CVE-2026-48191 was published Jun 1, 2026
Insecure default settings of Portainer CE grant regular (non-admin) users privileges that allow... High Unreviewed
CVE-2026-33590 was published May 28, 2026
The affected product creates a directory with insecure default permissions during administrative... High Unreviewed
CVE-2026-44468 was published May 26, 2026
The affected product extracts installation files to a temporary directory with incorrect default... High Unreviewed
CVE-2026-44469 was published May 26, 2026
Splinterware System Scheduler Pro 5.12 contains an insecure file permissions vulnerability that... High Unreviewed
CVE-2018-25359 was published May 26, 2026
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through... High Unreviewed
CVE-2025-32749 was published May 26, 2026
Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows... Moderate Unreviewed
CVE-2026-8487 was published May 20, 2026
Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail... Critical Unreviewed
CVE-2026-47107 was published May 19, 2026
Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could... Moderate Unreviewed
CVE-2025-48516 was published May 15, 2026
Incorrect default permissions in the installation directory for the AMD chipset driver could... High Unreviewed
CVE-2026-0432 was published May 15, 2026
Incorrect default permissions in the installation directory for the AMD general-purpose input... High Unreviewed
CVE-2025-48512 was published May 15, 2026
Due to improper input handling under certain conditions, SAP NetWeaver Application Server ABAP... Low Unreviewed
CVE-2026-27680 was published May 14, 2026
Hiseeu C90 v5.7.15 is vulnerable to Insecure Permissions. The UART bootloader is accessible when... Moderate Unreviewed
CVE-2026-36742 was published May 13, 2026
Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local... Moderate Unreviewed
CVE-2026-21015 was published May 13, 2026
Incorrect default permissions for some Intel(R) NPU Driver software installers before version 32... Moderate Unreviewed
CVE-2026-20718 was published May 12, 2026
Spring AI: ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage High
CVE-2026-41712 was published for org.springframework.ai:spring-ai-advisors-vector-store (Maven) May 12, 2026
Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local... High Unreviewed
CVE-2026-0539 was published Apr 22, 2026
HKUDS OpenHarness prior to PR #147 remediation contains an insecure default configuration... High Unreviewed
CVE-2026-6823 was published Apr 21, 2026
HKUDS OpenHarness prior to PR #156 remediation exposes plugin lifecycle commands including ... High Unreviewed
CVE-2026-6819 was published Apr 21, 2026
SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation... High Unreviewed
CVE-2026-39454 was published Apr 20, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database