Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,455
Maven
5,000+
npm
5,000+
NuGet
1,090
pip
5,000+
Pub
13
RubyGems
1,135
Rust
1,509
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

53 advisories

Loading
A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function... Moderate Unreviewed
CVE-2026-15479 was published Jul 12, 2026
A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the... Moderate Unreviewed
CVE-2026-12066 was published Jun 12, 2026
A vulnerability was determined in Tiandy Easy7 Integrated Management Platform 7.17.0. This issue... Moderate Unreviewed
CVE-2026-9466 was published May 26, 2026
An issue in Intelbras VIP-1230-D-G4 Version V2.800.00IB00C.0.T allows a remote attacker to obtain... Moderate Unreviewed
CVE-2026-36438 was published May 18, 2026
The LatePoint plugin for WordPress is vulnerable to Account Takeover via Weak Password Recovery... Moderate Unreviewed
CVE-2026-7652 was published May 9, 2026
Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An... Moderate Unreviewed
CVE-2025-36579 was published Apr 16, 2026
The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Unvalidated... Moderate Unreviewed
CVE-2026-4136 was published Mar 20, 2026
A security flaw has been discovered in Sangfor Operation and Maintenance Security Management... Moderate Unreviewed
CVE-2026-1325 was published Jan 22, 2026
A security vulnerability has been detected in Uasoft badaso up to 2.9.7. Affected is the function... Moderate Unreviewed
CVE-2025-15398 was published Jan 1, 2026
The Easy Digital Downloads plugin for WordPress is vulnerable to Unvalidated Redirect in all... Moderate Unreviewed
CVE-2025-14783 was published Dec 31, 2025
A vulnerability was identified in Shenzhen Sixun Software Sixun Shanghui Group Business... Moderate Unreviewed
CVE-2025-14696 was published Dec 15, 2025
A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected... Moderate Unreviewed
CVE-2025-13565 was published Nov 23, 2025
Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on... Moderate Unreviewed
CVE-2025-56748 was published Oct 15, 2025
A vulnerability has been found in Wavlink WL-WN578W2 221110. The affected element is an unknown... Moderate Unreviewed
CVE-2025-10322 was published Sep 12, 2025
Firefox for iOS would not respect a Content-Disposition header of type Attachment and would... Moderate Unreviewed
CVE-2025-55030 was published Aug 19, 2025
A vulnerability classified as problematic was found in jshERP up to 3.5. Affected by this... Moderate Unreviewed
CVE-2025-7948 was published Jul 22, 2025
A vulnerability was found in Mercusys MW301R 1.0.2 Build 190726 Rel.59423n. It has been declared... Moderate Unreviewed
CVE-2025-7881 was published Jul 20, 2025
IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow... Moderate Unreviewed
CVE-2024-43190 was published Jul 7, 2025
Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an... Moderate Unreviewed
CVE-2025-1231 was published Feb 11, 2025
A vulnerability, which was classified as critical, has been found in YunzMall up to 2.4.2. This... Moderate Unreviewed
CVE-2025-0331 was published Jan 9, 2025
IBM Security SOAR 51.0.1.0 and earlier contains a mechanism for users to recover or change their... Moderate Unreviewed
CVE-2024-45670 was published Nov 14, 2024
A vulnerability classified as problematic was found in QileCMS up to 1.1.3. This vulnerability... Moderate Unreviewed
CVE-2024-9907 was published Oct 13, 2024
A vulnerability classified as critical was found in TDuckCloud TDuckPro up to 6.3. Affected by... Moderate Unreviewed
CVE-2024-8692 was published Sep 11, 2024
In lunary-ai/lunary version 1.2.4, a vulnerability exists in the password recovery mechanism... Moderate Unreviewed
CVE-2024-5277 was published Jun 6, 2024
A vulnerability classified as problematic has been found in Huaxia ERP up to 3.1. Affected is an... Moderate Unreviewed
CVE-2024-0491 was published Jan 13, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database