Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,450
Maven
5,000+
npm
5,000+
NuGet
1,090
pip
5,000+
Pub
13
RubyGems
1,134
Rust
1,509
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

18 advisories

Loading
Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an... High Unreviewed
CVE-2023-1968 was published Apr 28, 2023
Excessive attack surface due to binding to an unrestricted IP address. The following products are... Moderate Unreviewed
CVE-2023-41742 was published Aug 31, 2023
Server receiving a malformed message based on a list of IPs resulting in heap corruption causing... Moderate Unreviewed
CVE-2023-5398 was published Apr 17, 2024
dbt allows Binding to an Unrestricted IP Address via socketsocket Moderate
CVE-2024-36105 was published for dbt-core (pip) May 28, 2024
ericwb Credited to ericwb
Excessive attack surface in archive-server service due to binding to an unrestricted IP address.... Low Unreviewed
CVE-2024-49382 was published Oct 15, 2024
Excessive attack surface in acep-collector service due to binding to an unrestricted IP address.... Low Unreviewed
CVE-2024-49384 was published Oct 15, 2024
Excessive attack surface in acep-importer service due to binding to an unrestricted IP address.... Low Unreviewed
CVE-2024-49383 was published Oct 15, 2024
Binding to an unrestricted ip address in GitHub allows an unauthorized attacker to execute code... High Unreviewed
CVE-2025-55322 was published Sep 24, 2025
A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite... Critical Unreviewed
CVE-2025-61934 was published Oct 24, 2025
Duplicate Advisory: Keycloak allows Binding to an Unrestricted IP Address Moderate
GHSA-7m9g-pmxf-m9m8 was published for org.keycloak:keycloak-quarkus-server (Maven) Nov 13, 2025 • withdrawn
Keycloak has debug default bind address Moderate
CVE-2025-11538 was published for org.keycloak:keycloak-quarkus-dist (Maven) Dec 2, 2025
Binding to an unrestricted ip address in Azure IoT SDK allows an unauthorized attacker to... Moderate Unreviewed
CVE-2026-21528 was published Feb 10, 2026
OpenClaw's Chrome extension relay binds publicly due to wildcard treated as loopback Moderate
CVE-2026-28395 was published for openclaw (npm) Feb 17, 2026
qi-scape Credited to qi-scape
Apache IoTDB has an Insecure Default Configuration Vulnerability Critical
CVE-2026-24015 was published for org.apache.iotdb:iotdb-core (Maven) Mar 9, 2026
OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0 High
GHSA-525j-hqq2-66r4 was published for openclaw (npm) Apr 17, 2026
R1kko1337 Credited to R1kko1337
gopls by default communicates via pipe. However, -port and -listen flags are supported as means... High Unreviewed
CVE-2026-42503 was published May 6, 2026
Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a... Critical Unreviewed
CVE-2026-0481 was published May 15, 2026
PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in Critical
CVE-2026-57123 was published for praisonaiagents (pip) Jun 18, 2026
sour-exploit Credited to sour-exploit
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database