Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,863
Maven
5,000+
npm
5,000+
NuGet
1,131
pip
5,000+
Pub
13
RubyGems
1,158
Rust
1,586
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

548 advisories

Loading
Insertion of sensitive information into log file vulnerability in Apache APISIX. This... Moderate Unreviewed
CVE-2026-78242 was published Oct 1, 2026
Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker... Moderate Unreviewed
CVE-2026-92872 was published Sep 30, 2026
Apache Airflow's Teradata provider embedded cloud storage credentials directly into SQL... Moderate Unreviewed
CVE-2026-81862 was published Sep 29, 2026
Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and... Moderate Unreviewed
CVE-2026-85417 was published Sep 25, 2026
The Botslab G980H dash camera firmware includes sensitive configuration information, including... Moderate Unreviewed
CVE-2026-82716 was published Sep 24, 2026
An information exposure vulnerability in the job scheduling component of SANnav allows sensitive... Moderate Unreviewed
CVE-2026-14442 was published Sep 24, 2026
OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL... Moderate Unreviewed
CVE-2026-93982 was published Sep 19, 2026
If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application... Moderate Unreviewed
CVE-2026-92758 was published Sep 17, 2026
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet... Moderate Unreviewed
CVE-2026-73457 was published Sep 16, 2026
Insertion of sensitive information into log file in the slow query logging feature in Devolutions... Moderate Unreviewed
CVE-2026-92237 was published Sep 15, 2026
On affected platforms running Arista EOS, under certain circumstances plaintext private keys may... Moderate Unreviewed
CVE-2026-73465 was published Sep 15, 2026
On affected platforms running Arista EOS, under certain circumstances user passwordss may be... Moderate Unreviewed
CVE-2026-73466 was published Sep 15, 2026
On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets... Moderate Unreviewed
CVE-2026-73467 was published Sep 15, 2026
An issue was discovered in Keyfactor SignServer before 7.6.0. The attribute ATTRIBUTESFILE in... Moderate Unreviewed
CVE-2026-25826 was published Sep 15, 2026
A flaw was found in hawtio-operator. When a custom Route TLS secret is configured and the... Moderate Unreviewed
CVE-2026-81320 was published Sep 15, 2026
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden... Moderate Unreviewed
CVE-2026-84525 was published Sep 14, 2026
A privacy issue was addressed with improved private data redaction for log entries. This issue is... Moderate Unreviewed
CVE-2026-84513 was published Sep 14, 2026
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27 and... Moderate Unreviewed
CVE-2026-84527 was published Sep 14, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... Moderate Unreviewed
CVE-2026-80124 was published Sep 9, 2026
The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log... Moderate Unreviewed
CVE-2026-78631 was published Sep 8, 2026
Insertion of sensitive information into log file in Windows Program Compatibility Assistant... Moderate Unreviewed
CVE-2026-68873 was published Sep 8, 2026
Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP... Moderate Unreviewed
CVE-2026-86597 was published Sep 8, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... Moderate Unreviewed
CVE-2026-80056 was published Sep 7, 2026
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM... Moderate Unreviewed
CVE-2026-17442 was published Sep 4, 2026
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM... Moderate Unreviewed
CVE-2026-16689 was published Sep 4, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database