GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,968
Erlang
39
GitHub Actions
38
Go
2,617
Maven
5,000+
npm
4,255
NuGet
760
pip
4,040
Pub
12
RubyGems
953
Rust
1,050
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
52 advisories
Filter by severity
Apache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurely.
Session ids...
High
Unreviewed
CVE-2025-40933
was published
Sep 17, 2025
Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces...
High
Unreviewed
CVE-2025-40920
was published
Aug 11, 2025
Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely.
The...
High
Unreviewed
CVE-2025-40923
was published
Jul 16, 2025
Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF...
High
Unreviewed
CVE-2025-40915
was published
Jun 11, 2025
Data::Entropy for Perl 0.007 and earlier use the rand() function as the default source of entropy...
High
Unreviewed
CVE-2025-1860
was published
Mar 28, 2025
A use of a cryptographically weak pseudo-random number generator vulnerability in the...
High
Unreviewed
CVE-2021-26091
was published
Mar 24, 2025
A vulnerability in langgenius/dify v0.10.1 allows an attacker to take over any account, including...
High
Unreviewed
CVE-2025-1796
was published
Mar 20, 2025
Crypt::Random Perl package 1.05 through 1.55 may use rand() function, which is not...
High
Unreviewed
CVE-2025-1828
was published
Mar 11, 2025
The Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand()...
High
Unreviewed
CVE-2018-25107
was published
Dec 29, 2024
The Migration, Backup, Staging WordPress plugin before 0.9.106 does not use sufficient...
High
Unreviewed
CVE-2024-7315
was published
Oct 2, 2024
The goTenna Pro ATAK Plugin does not use SecureRandom when generating
its cryptographic keys....
High
Unreviewed
CVE-2024-45723
was published
Sep 26, 2024
The goTenna Pro series does not use SecureRandom when generating its cryptographic keys. The...
High
Unreviewed
CVE-2024-47126
was published
Sep 26, 2024
Mateso PasswordSafe through 8.13.9.26689 has Weak Cryptography.
High
Unreviewed
CVE-2024-34538
was published
May 6, 2024
RT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L * seed ...
High
Unreviewed
CVE-2024-25389
was published
Mar 27, 2024
The Binance Trust Wallet app for iOS in commit 3cd6e8f647fbba8b5d8844fcd144365a086b629f, git tag...
High
Unreviewed
CVE-2024-23660
was published
Feb 8, 2024
An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate...
High
Unreviewed
CVE-2023-27791
was published
Oct 19, 2023
The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using...
High
Unreviewed
CVE-2022-26943
was published
Oct 19, 2023
The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6...
High
Unreviewed
CVE-2023-39910
was published
Aug 9, 2023
Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator.
High
Unreviewed
CVE-2023-32549
was published
Jun 6, 2023
Osprey Pump Controller version 1.01 is vulnerable to a weak session token generation algorithm...
High
Unreviewed
CVE-2023-28395
was published
Mar 28, 2023
profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can...
High
Unreviewed
CVE-2022-40769
was published
Sep 19, 2022
OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token...
High
Unreviewed
CVE-2022-33738
was published
Jul 7, 2022
A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to...
High
Unreviewed
CVE-2022-20817
was published
Jun 16, 2022
Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the...
High
Unreviewed
CVE-2021-22948
was published
May 24, 2022
In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used.
High
Unreviewed
CVE-2021-37553
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API