Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,569
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,522
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

67 advisories

Loading
An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy... High Unreviewed
CVE-2025-25253 was published Oct 14, 2025
aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections Low
CVE-2026-54275 was published for aiohttp (pip) Jun 15, 2026
denyspakizh-tob Credited to denyspakizh-tob and bdraco bdraco bdraco
Improper host validation in the social login autofill feature in Devolutions Remote Desktop... Moderate Unreviewed
CVE-2026-12162 was published Jun 16, 2026
QUIC has Broken TLS verification Critical
CVE-2026-49457 was published for quic (Erlang) Jul 1, 2026
benmmurphy Credited to benmmurphy
Apache Directory LDAP API lacks server certificate verification for LDAP hostnames High
CVE-2026-35563 was published for org.apache.directory.api:api-ldap-client-api (Maven) Jun 1, 2026
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue... High Unreviewed
CVE-2026-41603 was published Apr 28, 2026
OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake High
CVE-2026-44393 was published for oslo.messaging (pip) Jun 4, 2026
Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 may... Critical Unreviewed
CVE-2026-15925 was published Jul 16, 2026
Apereo CAS Client accepts any CA-trusted certificate for any hostname, provided the URL the... High Unreviewed
CVE-2026-15243 was published Jul 24, 2026
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python... Moderate Unreviewed
CVE-2026-66053 was published Jul 27, 2026
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib... Critical Unreviewed
CVE-2026-48144 was published Jul 27, 2026
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings... High Unreviewed
CVE-2026-48145 was published Jul 27, 2026
An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname... Moderate Unreviewed
CVE-2026-58040 was published Jul 30, 2026
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default... Critical Unreviewed
CVE-2026-59638 was published Aug 3, 2026
IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim... Low Unreviewed
CVE-2026-12730 was published Aug 5, 2026
TLS hostname verification issue in Apache Ranger Client Code in versions <= 2.8.0. Users are... High Unreviewed
CVE-2026-65942 was published Aug 10, 2026
Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions... High Unreviewed
CVE-2026-62243 was published Aug 22, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database