Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,624
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

676 advisories

Loading
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could... Low Unreviewed
CVE-2026-73743 was published Sep 1, 2026
MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive... Critical Unreviewed
CVE-2026-69658 was published Aug 28, 2026
A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway... High Unreviewed
CVE-2026-73809 was published Aug 28, 2026
openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and... High Unreviewed
CVE-2026-81691 was published Aug 27, 2026
When the ClickHouse plugin uses Native protocol (the default) with PDC or secure SOCKS, it asks... Moderate Unreviewed
CVE-2026-19854 was published Aug 27, 2026
A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple... High Unreviewed
CVE-2026-29988 was published Aug 26, 2026
rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing... Moderate Unreviewed
CVE-2026-79779 was published Aug 25, 2026
rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes... Critical Unreviewed
CVE-2026-79782 was published Aug 25, 2026
When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in... Moderate Unreviewed
CVE-2026-77131 was published Aug 25, 2026
Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions... High Unreviewed
CVE-2026-12556 was published Aug 24, 2026
A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. During... Moderate Unreviewed
CVE-2026-19683 was published Aug 20, 2026
Download of code without integrity check, inclusion of functionality from untrusted control... Critical Unreviewed
CVE-2026-22306 was published Aug 19, 2026
stigmem-node contains an insecure default configuration vulnerability that allows federation... Critical Unreviewed
CVE-2026-76244 was published Aug 19, 2026
The HTTPPasswordMgr class in the urllib.request module, along with its subclasses... Moderate Unreviewed
CVE-2026-15806 was published Aug 18, 2026
A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could... Moderate Unreviewed
CVE-2026-20294 was published Aug 5, 2026
This issue was addressed by using HTTPS when sending information over the network. This issue is... Moderate Unreviewed
CVE-2026-64742 was published Jul 27, 2026
Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext... Moderate Unreviewed
CVE-2026-3182 was published Jul 21, 2026
Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock... Moderate Unreviewed
CVE-2026-34346 was published Jul 14, 2026
IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 transmits data in clear text that could... Moderate Unreviewed
CVE-2025-36336 was published Jun 30, 2026
IBM watsonx.data intelligence 5.2.2, 5.3.0, 5.3.1, 5.3.1 through patch-1 transmits data in clear... Moderate Unreviewed
CVE-2025-12530 was published Jun 30, 2026
The Apache Airflow FTP provider's `FTPSHook.get_conn()` created an `ftplib.FTP_TLS` connection... High Unreviewed
CVE-2026-49486 was published Jun 26, 2026
Overview: A vulnerability has been found in FAST/TOOLS and CI Server. The web server may return... High Unreviewed
CVE-2026-11833 was published Jun 23, 2026
An attacker within BLE communication range can passively intercept wireless traffic and obtain... High Unreviewed
CVE-2026-50034 was published Jun 19, 2026
A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable... High Unreviewed
CVE-2026-9741 was published Jun 10, 2026
This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in... High Unreviewed
CVE-2026-45432 was published Jun 4, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database