Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,509
Maven
5,000+
npm
5,000+
NuGet
1,100
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

15 advisories

Loading
Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was... High Unreviewed
CVE-2026-55957 was published Jun 29, 2026
It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA... High Unreviewed
CVE-2026-57915 was published Jun 26, 2026
Apache HttpClient accepts SCRAM-SHA-256 authentication without proper mutual authentication verification High
CVE-2026-40542 was published for org.apache.httpcomponents.client5:httpclient5 (Maven) Apr 22, 2026
An unsafe default authentication vulnerability exists in the Initial Setup Authentication... High Unreviewed
CVE-2025-24322 was published Aug 20, 2025
A missing authentication check in the uninstall endpoint of parisneo/lollms-webui V13 allows... High Unreviewed
CVE-2024-9919 was published Mar 20, 2025
LinkJoin through 882f196 mishandles token ownership in password reset. High Unreviewed
CVE-2025-55138 was published Aug 7, 2025
An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi... High Unreviewed
CVE-2024-12048 was published Mar 20, 2025
A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7.6... High Unreviewed
CVE-2024-52965 was published Jul 8, 2025
An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f... High Unreviewed
CVE-2024-9216 was published Mar 20, 2025
A missing check_access() function in the lollms_binding_infos module of the parisneo/lollms... High Unreviewed
CVE-2024-11302 was published Mar 20, 2025
In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID.... High Unreviewed
CVE-2024-20153 was published Jan 6, 2025
Infinispan REST Server's bulk read endpoints do not properly evaluate user permissions High
CVE-2023-3628 was published for org.infinispan:infinispan-server-rest (Maven) Dec 30, 2023
Infinispan REST Server's cache retrieval endpoints do not properly evaluate the necessary admin permissions High
CVE-2023-3629 was published for org.infinispan:infinispan-server-rest (Maven) Dec 30, 2023
The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an... High Unreviewed
CVE-2023-52424 was published May 17, 2024
Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2. High Unreviewed
CVE-2022-2821 was published Aug 16, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database