Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

48 advisories

Loading
A vulnerability was identified in Inbox Foundry ActiveInbox Extension up to 7.10.24 on Chrome.... Moderate Unreviewed
CVE-2026-82808 was published Aug 31, 2026
A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the... Moderate Unreviewed
CVE-2026-78062 was published Aug 23, 2026
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software... Moderate Unreviewed
CVE-2026-20316 was published Jul 29, 2026
Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an... Moderate Unreviewed
CVE-2026-22055 was published Jun 4, 2026
Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an... Moderate Unreviewed
CVE-2026-22054 was published Jun 4, 2026
AstrBot Makes Use of Hard-coded Password Moderate
CVE-2026-7579 was published for AstrBot (pip) May 1, 2026
A flaw has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7. The impacted element is... Moderate Unreviewed
CVE-2026-8032 was published May 6, 2026
A vulnerability has been found in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is... Moderate Unreviewed
CVE-2026-6610 was published Apr 20, 2026
A security flaw has been discovered in liangliangyy DjangoBlog up to 2.1.0.0. This affects an... Moderate Unreviewed
CVE-2026-6578 was published Apr 20, 2026
A vulnerability has been found in osuuu LightPicture up to 1.2.2. This issue affects some unknown... Moderate Unreviewed
CVE-2026-6574 was published Apr 19, 2026
Siklu EtherHaul 8010 siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b devices have a static root... Moderate Unreviewed
CVE-2025-57175 was published Apr 8, 2026
A use of hard-coded password vulnerability has been reported to affect Hyper Data Protector. The... Moderate Unreviewed
CVE-2025-59388 was published Mar 12, 2026
A weakness has been identified in i-SENS SmartLog App up to 2.6.8 on Android. This affects an... Moderate Unreviewed
CVE-2026-4216 was published Mar 16, 2026
A vulnerability was found in shsuishang ShopSuite ModulithShop up to... Moderate Unreviewed
CVE-2025-13252 was published Nov 17, 2025
The KiotViet Sync plugin for WordPress is vulnerable to authorizarion bypass in all versions up... Moderate Unreviewed
CVE-2025-12676 was published Nov 5, 2025
A hard-coded weak password vulnerability has been discovered in all Magic-branded devices from... Moderate Unreviewed
CVE-2025-61330 was published Oct 16, 2025
A security flaw has been discovered in Tomofun Furbo 360 and Furbo Mini. Affected by this... Moderate Unreviewed
CVE-2025-11643 was published Oct 12, 2025
A vulnerability was determined in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3... Moderate Unreviewed
CVE-2025-9310 was published Aug 21, 2025
An issue was discovered in Commvault before 11.36.60. A vulnerability in a known login mechanism... Moderate Unreviewed
CVE-2025-57788 was published Aug 20, 2025
A vulnerability was determined in linlinjava litemall up to 1.8.0. Affected by this issue is some... Moderate Unreviewed
CVE-2025-8974 was published Aug 14, 2025
A vulnerability classified as critical was found in NuCom NC-WR744G 8.5.5 Build 20200530.307.... Moderate Unreviewed
CVE-2025-5379 was published May 31, 2025
Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded... Moderate Unreviewed
CVE-2025-47748 was published May 28, 2025
TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a hardcoded password for the... Moderate Unreviewed
CVE-2025-28031 was published Apr 22, 2025
A Use of Hard-Coded Password issue was discovered in Phoenix Broadband PowerAgent SC3 BMS, all... Moderate Unreviewed
CVE-2017-6039 was published May 13, 2022
An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302... Moderate Unreviewed
CVE-2025-25984 was published Apr 18, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database