GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
38
Go
2,831
Maven
5,000+
npm
4,462
NuGet
775
pip
4,226
Pub
12
RubyGems
972
Rust
1,093
Swift
47
Unreviewed advisories
All unreviewed
5,000+
477 advisories
Filter by severity
Jervis's Salt for PBKDF2 derived from password
High
CVE-2025-68703
was published
for
net.gleske:jervis
(Maven)
Jan 13, 2026
The User Management Engine (UME) in NetWeaver Application Server for Java (NW AS Java) utilizes...
Low
Unreviewed
CVE-2026-0510
was published
Jan 13, 2026
Multiple vulnerabilities in Aqara Hub firmware update process in the Camera Hub G3 4.1.9_0027,...
High
Unreviewed
CVE-2025-65295
was published
Dec 11, 2025
Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E...
Moderate
Unreviewed
CVE-2025-41743
was published
Dec 2, 2025
With TLS 1.3 pre-shared key (PSK) a malicious or faulty server could ignore the request for PFS ...
Moderate
Unreviewed
CVE-2025-11935
was published
Nov 22, 2025
Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0...
Moderate
Unreviewed
CVE-2025-12439
was published
Nov 10, 2025
Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19...
Critical
Unreviewed
CVE-2025-12478
was published
Oct 29, 2025
Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability
Moderate
CVE-2025-55248
was published
for
Microsoft.NetCore.App.Runtime.linux-arm
(NuGet)
Oct 15, 2025
Apache Spark has Inadequate Encryption Strength
Moderate
CVE-2025-55039
was published
for
org.apache.spark:spark-network-common_2.12
(Maven)
Oct 15, 2025
Duplicate Advisory: Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability
Moderate
GHSA-987x-96fq-9384
was published
for
Microsoft.NetCore.App.Runtime.linux-arm
(NuGet)
Oct 14, 2025
•
withdrawn
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: l2cap: Check...
Moderate
Unreviewed
CVE-2025-39889
was published
Sep 24, 2025
Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0...
High
Unreviewed
CVE-2025-46409
was published
Aug 28, 2025
ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective...
Critical
Unreviewed
CVE-2025-45765
was published
Aug 7, 2025
jsrsasign v11.1.0 was discovered to contain weak encryption.
High
Unreviewed
CVE-2025-45764
was published
Aug 6, 2025
php-jwt v6.11.0 was discovered to contain weak encryption.
High
Unreviewed
CVE-2025-45769
was published
Jul 31, 2025
jwt v5.4.3 was discovered to contain weak encryption.
High
Unreviewed
CVE-2025-45770
was published
Jul 31, 2025
IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could allow malicious actors to view and...
Moderate
Unreviewed
CVE-2025-36106
was published
Jul 21, 2025
A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic. Affected...
Moderate
Unreviewed
CVE-2025-7789
was published
Jul 18, 2025
Brocade ASCG before 3.3.0 allows for the use of medium strength cryptography algorithms on...
High
Unreviewed
CVE-2025-7398
was published
Jul 18, 2025
An issue was discovered in Kaseya Rapid Fire Tools Network Detective through 2.0.16.0. A...
High
Unreviewed
CVE-2025-32874
was published
Jul 16, 2025
Cryptographic issues in Windows Cryptographic Services allows an unauthorized attacker to...
Moderate
Unreviewed
CVE-2025-48823
was published
Jul 8, 2025
Weak server key used for TLS encryption. The following products are affected: Acronis Cyber...
Moderate
Unreviewed
CVE-2025-48960
was published
Jun 4, 2025
An issue was discovered in Unicom Focal Point 7.6.1. The database is encrypted with a hardcoded...
Moderate
Unreviewed
CVE-2025-43925
was published
Jun 3, 2025
IBM Sterling Secure Proxy 6.0.0.0 through 6.0.3.1, 6.1.0.0 through 6.1.0.0, and 6.2.0.0 through 6...
Moderate
Unreviewed
CVE-2024-38341
was published
May 28, 2025
A vulnerability classified as problematic was found in calmkart Django-sso-server up to...
Moderate
Unreviewed
CVE-2025-4894
was published
May 18, 2025
ProTip!
Advisories are also available from the
GraphQL API