Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,509
Maven
5,000+
npm
5,000+
NuGet
1,100
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

9 advisories

Loading
The silent Just-In-Time (JIT) provisioning feature in federated authentication implementations... Moderate Unreviewed
CVE-2024-1248 was published Jul 4, 2026
Casdoor doesn't verify that a JWT used for token exchange is still active Critical
CVE-2026-9097 was published for github.com/casdoor/casdoor (Go) May 28, 2026
Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows... Critical Unreviewed
CVE-2025-67109 was published Dec 23, 2025
eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation,... Critical Unreviewed
CVE-2025-67108 was published Dec 23, 2025
Successful exploitation of this vulnerability could result in the product failing to re-establish... High Unreviewed
CVE-2025-61736 was published Dec 17, 2025
Infrahub: Deleted and expired API tokens can still authenticate Moderate
CVE-2025-59036 was published for infrahub-server (pip) Sep 10, 2025
fatih-acar Credited to fatih-acar
The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already... Moderate Unreviewed
CVE-2025-4384 was published May 6, 2025
Pow Mnesia cache doesn't invalidate all expired keys on startup Moderate
CVE-2023-42446 was published for pow (Erlang) Sep 19, 2023
gVirtu Credited to gVirtu
FlyteAdmin Insufficient AccessToken Expiration Check Moderate
CVE-2022-31145 was published for github.com/flyteorg/flyteadmin (Go) Jul 15, 2022
mayitbeegh Credited to mayitbeegh
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database