Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,569
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,522
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

383 advisories

Loading
The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC... Moderate Unreviewed
CVE-2026-8173 was published Aug 24, 2026
n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain an information disclosure vulnerability... High Unreviewed
CVE-2026-77076 was published Aug 20, 2026
openssl_encrypt versions before 1.4.0 contain an information disclosure vulnerability in the ... High Unreviewed
CVE-2026-74879 was published Aug 17, 2026
HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions... Moderate Unreviewed
CVE-2026-56620 was published Aug 10, 2026
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of... Moderate Unreviewed
CVE-2026-47622 was published Aug 4, 2026
HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory,... Low Unreviewed
CVE-2026-56571 was published Jul 31, 2026
HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages... Low Unreviewed
CVE-2026-56568 was published Jul 31, 2026
IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9... Moderate Unreviewed
CVE-2026-11904 was published Jul 30, 2026
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in... Moderate Unreviewed
CVE-2025-59177 was published Jul 27, 2026
HCL Connections is vulnerable to information disclosure which could allow a user to obtain... Low Unreviewed
CVE-2026-56537 was published Jul 27, 2026
Parse Server versions >= 9.0.0 before 9.10.0-alpha.5 and >= 8.2.2 before 8.6.86 return GraphQL... Moderate Unreviewed
CVE-2026-66009 was published Jul 24, 2026
Parse Server versions >= 9.0.0 before 9.10.0-alpha.6 and >= 8.2.2 before 8.6.87 disclose Pointer... Moderate Unreviewed
CVE-2026-66008 was published Jul 24, 2026
In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing... High Unreviewed
CVE-2026-13182 was published Jul 22, 2026
Parse Server versions >= 9.0.0 before 9.10.0-alpha.4 and versions before 8.6.85 contain a schema... Moderate Unreviewed
CVE-2026-64627 was published Jul 21, 2026
SurrealDB versions before 3.1.0 contain an information disclosure vulnerability where... Moderate Unreviewed
CVE-2026-63748 was published Jul 20, 2026
IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed... Moderate Unreviewed
CVE-2026-8861 was published Jul 17, 2026
HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages... Moderate Unreviewed
CVE-2024-23575 was published Jul 17, 2026
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel... Moderate Unreviewed
CVE-2026-56139 was published Jul 6, 2026
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Netty... Moderate Unreviewed
CVE-2026-49365 was published Jul 6, 2026
Capgo before 12.128.2 contains improper error handling in the /private/accept_invitation endpoint... Moderate Unreviewed
CVE-2026-56331 was published Jul 1, 2026
IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow a remote attacker to obtain... Moderate Unreviewed
CVE-2025-36328 was published Jun 30, 2026
HCL ZIE for Web is affetced by an Unrestricted File Upload vulnerability, If the server is... Moderate Unreviewed
CVE-2025-59872 was published Jun 17, 2026
HCL iControl v4.0.0 was affected by Unhandled Exception - Stack Trace Disclosure vulnerability.... Low Unreviewed
CVE-2025-52611 was published Jun 4, 2026
HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during... Moderate Unreviewed
CVE-2025-52606 was published Jun 4, 2026
IBM Business Automation Workflow containers and traditional may leak information about its... Moderate Unreviewed
CVE-2026-1248 was published May 27, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database