Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,636
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,529
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

676 advisories

Loading
Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. tencent-cloud... Moderate Unreviewed
CVE-2026-31924 was published Apr 14, 2026
Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. This can occur... High Unreviewed
CVE-2026-31923 was published Apr 14, 2026
IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on... Moderate Unreviewed
CVE-2026-4820 was published Apr 1, 2026
The PaperCut NG/MF (specifically, the embedded application for Konica Minolta devices) is... Low Unreviewed
CVE-2026-5115 was published Mar 31, 2026
A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy,... Moderate Unreviewed
CVE-2026-5119 was published Mar 30, 2026
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to exposure of... Moderate Unreviewed
CVE-2026-1014 was published Mar 25, 2026
IBM Concert 1.0.0 through 2.2.0 transmits data in clear text that could allow an attacker to... Moderate Unreviewed
CVE-2025-64648 was published Mar 25, 2026
A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated... Moderate Unreviewed
CVE-2026-20115 was published Mar 25, 2026
Service information is not encrypted when transmitted as BACnet packets over the wire, and can... Critical Unreviewed
CVE-2026-24060 was published Mar 21, 2026
Edimax GS-5008PL firmware version 1.00.54 and prior use cleartext HTTP for the web management... High Unreviewed
CVE-2026-32838 was published Mar 18, 2026
In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure... Moderate Unreviewed
CVE-2026-32745 was published Mar 13, 2026
IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could... Low Unreviewed
CVE-2025-13718 was published Mar 13, 2026
Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized... High Unreviewed
CVE-2026-23661 was published Mar 10, 2026
An issue pertaining to CWE-319: Cleartext Transmission of Sensitive Information was discovered in... High Unreviewed
CVE-2025-70048 was published Mar 9, 2026
Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client... High Unreviewed
CVE-2026-30795 was published Mar 5, 2026
Cleartext Transmission of Sensitive Information vulnerability in rustdesk-server-pro RustDesk... High Unreviewed
CVE-2026-30796 was published Mar 5, 2026
Improper Restriction of Excessive Authentication Attempts, Use of Password Hash With Insufficient... Critical Unreviewed
CVE-2026-30790 was published Mar 5, 2026
IBM App Connect Operator versions CD 11.3.0 through 11.6.0 and 12.1.0 through 12.20.0, LTS... Moderate Unreviewed
CVE-2025-13490 was published Mar 3, 2026
Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher... Moderate Unreviewed
CVE-2026-20801 was published Mar 3, 2026
In multiple functions of btm_ble_sec.cc, there is a possible unencrypted communication due to... Moderate Unreviewed
CVE-2024-43766 was published Mar 2, 2026
In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on on-premises... High Unreviewed
CVE-2025-58107 was published Mar 2, 2026
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials... High Unreviewed
CVE-2026-27752 was published Feb 27, 2026
The embedded web interface of the device does not support HTTPS/TLS for authentication and uses... High Unreviewed
CVE-2026-24455 was published Feb 20, 2026
IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and... Moderate Unreviewed
CVE-2025-27903 was published Feb 17, 2026
The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data... Moderate Unreviewed
CVE-2026-2539 was published Feb 15, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database