Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

15 advisories

Loading
Weak credentials in the CashDro 3 web administration panel, version 24.01.00.26, where the... Critical Unreviewed
CVE-2026-8076 was published May 8, 2026
fast-jwt: JWT auth bypass due to empty HMAC secret accepted by async key resolver Critical
CVE-2026-44351 was published for fast-jwt (npm) May 6, 2026
bhaswanthc Credited to bhaswanthc and SociableSteve SociableSteve SociableSteve
Use of a deterministic credential generation algorithm in /ftl/bin/calc_f2 in Small Cell Sercomm... Critical Unreviewed
CVE-2025-67114 was published Mar 19, 2026
OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires... Critical Unreviewed
CVE-2026-22886 was published Mar 3, 2026
The Access Manager 92xx in hardware revision K7 is based on Linux instead of Windows CE embedded... Critical Unreviewed
CVE-2025-59103 was published Jan 26, 2026
Dover Fueling Solutions ProGauge MagLink LX4 Devices have default root credentials that cannot be... Critical Unreviewed
CVE-2025-30519 was published Sep 18, 2025
Partner Software's Partner Software Product and corresponding Partner Web application use the... Critical Unreviewed
CVE-2025-6077 was published Aug 2, 2025
An unauthenticated attacker who knows the target device's serial number, can generate the default... Critical Unreviewed
CVE-2024-51978 was published Jun 26, 2025
A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos... Critical Unreviewed
CVE-2024-12728 was published Dec 19, 2024
Kieback & Peter's DDC4000 series uses weak credentials, which may allow an unauthenticated... Critical Unreviewed
CVE-2024-43698 was published Oct 23, 2024
Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if... Critical Unreviewed
CVE-2024-1039 was published Feb 2, 2024
CasaOS contains weak JWT secrets Critical
CVE-2023-37266 was published for github.com/IceWhaleTech/CasaOS (Go) Jul 17, 2023
thomas-chauchefoin-sonarsource Credited to thomas-chauchefoin-sonarsource
Improper Privilege Management vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise,... Critical Unreviewed
CVE-2023-0635 was published Jul 6, 2023
The affected product exposes multiple sensitive data fields of the affected product. An attacker... Critical Unreviewed
CVE-2022-46738 was published May 23, 2023
Snap One OvrC Pro versions prior to 7.2 have their own locally... Critical Unreviewed
CVE-2023-31240 was published May 22, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database