Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,883
Maven
5,000+
npm
5,000+
NuGet
1,134
pip
5,000+
Pub
13
RubyGems
1,159
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,555
Rust
20
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

70 advisories

Loading
Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and... Moderate Unreviewed
CVE-2026-105485 was published Oct 6, 2026
On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an... Moderate Unreviewed
CVE-2026-73443 was published Sep 16, 2026
PocketMine-MP 3.x (before 3.27.0) does not implement Minecraft Bedrock protocol encryption, so... Moderate Unreviewed
CVE-2022-51016 was published Sep 7, 2026
When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation... Moderate Unreviewed
CVE-2026-12704 was published Sep 2, 2026
Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp... Moderate Unreviewed
CVE-2026-82470 was published Aug 29, 2026
Unauthenticated Other Vulnerability Type in Forminator <= 1.57.1 versions. Moderate Unreviewed
CVE-2026-82220 was published Aug 28, 2026
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security... Moderate Unreviewed
CVE-2026-17268 was published Aug 12, 2026
A flaw was found in the SAML broker component of Keycloak, an identity and access management... Moderate Unreviewed
CVE-2026-18967 was published Aug 6, 2026
HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. A... Moderate Unreviewed
CVE-2026-56453 was published Jul 16, 2026
Remote Keyless Entry System (RKES), using the 433 MHz key fob bearing FCC ID CWTR53R0... Moderate Unreviewed
CVE-2026-49319 was published Jun 25, 2026
IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2... Moderate Unreviewed
CVE-2023-33854 was published Jun 22, 2026
Authentication Bypass by Capture-replay vulnerability in Apache APISIX. Attacker can benefit... Moderate Unreviewed
CVE-2026-47341 was published Jun 19, 2026
Weak authentication in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber +... Moderate Unreviewed
CVE-2026-49322 was published May 29, 2026
Successfully using libcurl to do a transfer over a specific HTTP proxy (`proxyA`) with **Digest**... Moderate Unreviewed
CVE-2026-7168 was published May 13, 2026
Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth... Moderate Unreviewed
CVE-2026-27855 was published Mar 27, 2026
Crafted zones can lead to increased incoming network traffic. Moderate Unreviewed
CVE-2026-24027 was published Feb 9, 2026
D3D Wi-Fi Home Security System ZX-G12 v2.1.17 is susceptible to RF jamming on the 433 MHz alarm... Moderate Unreviewed
CVE-2025-65553 was published Jan 12, 2026
A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected... Moderate Unreviewed
CVE-2025-40807 was published Dec 9, 2025
Newforma Info Exchange (NIX) '/RemoteWeb/IntegrationServices.ashx' allows a remote,... Moderate Unreviewed
CVE-2025-35057 was published Oct 9, 2025
The Positron PX360BT SW REV 8 car alarm system is vulnerable to a replay attack due to a failure... Moderate Unreviewed
CVE-2025-56448 was published Sep 15, 2025
A weakness identified in OpenText Advanced Authentication where a Malicious browser plugin can... Moderate Unreviewed
CVE-2025-8616 was published Aug 6, 2025
Dradis through 4.16.0 allows referencing external images (resources) over HTTPS, instead of... Moderate Unreviewed
CVE-2023-50786 was published Jul 5, 2025
Authentication Bypass by Capture-replay vulnerability in Drupal One Time Password allows Remote... Moderate Unreviewed
CVE-2025-48012 was published May 21, 2025
Authentication Bypass by Capture-replay vulnerability in Drupal Enterprise MFA - TFA for Drupal... Moderate Unreviewed
CVE-2025-47706 was published May 14, 2025
Dell ECS, version(s) prior to ECS 3.8.1.3, contain(s) an Authentication Bypass by Capture-replay... Moderate Unreviewed
CVE-2024-52534 was published Dec 25, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database