Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

238 advisories

Loading
MISP contains an authentication bypass vulnerability in its LDAP and LinOTP authentication... Critical Unreviewed
CVE-2026-85216 was published Sep 3, 2026
A vulnerability exists in the Credential Manager component that may allow for unauthorized... High Unreviewed
CVE-2026-73778 was published Sep 1, 2026
SMP security request (from peripheral) does not include the maximum encryption key size supported... High Unreviewed
CVE-2026-19293 was published Aug 13, 2026
HCL MyCloud was affected with Weak Password Policy. It may increase the risk of account... Low Unreviewed
CVE-2026-56577 was published Jul 21, 2026
KTM System e-BOK enforces a maximum password length of six numeric digits and does not permit the... Moderate Unreviewed
CVE-2026-35097 was published Jun 30, 2026
A weakness has been identified in Tenda AC15 15.03.05.19. The impacted element is an unknown... Low Unreviewed
CVE-2026-11493 was published Jun 8, 2026
IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3... Moderate Unreviewed
CVE-2024-40684 was published May 27, 2026
A vulnerability was determined in Besen BS20 EV Charging Station up to 20260426. This impacts an... Low Unreviewed
CVE-2026-9394 was published May 26, 2026
This vulnerability exists in Quantum Networks router due to lack of enforcement of strong... High Unreviewed
CVE-2026-41038 was published Apr 21, 2026
An attacker with network access to the PLC is able to brute force discover passwords to gain... Critical Unreviewed
CVE-2026-6284 was published Apr 17, 2026
A Weak Password Requirements vulnerability in the password management function of Juniper... Critical Unreviewed
CVE-2026-33771 was published Apr 10, 2026
Nautobot: Management of users via REST API does not apply configured password validators Low
CVE-2026-34203 was published for nautobot (pip) Mar 31, 2026
morimori-dev Credited to morimori-dev
OpenClaw: Synology Chat Webhook Pre-Auth Rate-Limit Bypass Enables Brute-Force Guessing of Webhook Token Moderate
CVE-2026-35646 was published for openclaw (npm) Mar 29, 2026
zpbrent Credited to zpbrent
OpenClaw: Telegram Webhook Missing Guess Rate Limiting Enables Brute-Force Guessing of Weak Webhook Secret Moderate
CVE-2026-35628 was published for openclaw (npm) Mar 27, 2026
zpbrent Credited to zpbrent
OpenClaw: BlueBubbles Webhook Missing Rate Limiting Enables Brute-Force Password Guessing Moderate
CVE-2026-35623 was published for openclaw (npm) Mar 27, 2026
zpbrent Credited to zpbrent
HCL Aftermarket DPC is affected by Weak Password Policy vulnerability, which makes it easier for... Moderate Unreviewed
CVE-2025-55269 was published Mar 26, 2026
Vijkunja has Weak Password Policy Combined with Persistent Sessions After Password Change Critical
CVE-2026-27575 was published for code.vikunja.io/api (Go) Feb 25, 2026
iamsampathk Credited to iamsampathk
The web management interface of the device allows the administrator username and password to be... Critical Unreviewed
CVE-2026-25715 was published Feb 20, 2026
A weakness has been identified in Beetel 777VR1 up to 01.00.09/01.00.09_55. This vulnerability... Low Unreviewed
CVE-2026-1408 was published Jan 26, 2026
HCL AION  version 2 is affected by a Weak Password Policy vulnerability. This can  allow the use... Low Unreviewed
CVE-2025-55252 was published Jan 19, 2026
Man-in-the-middle attack vulnerability in the Clone module. Impact: Successful exploitation of... Moderate Unreviewed
CVE-2025-68963 was published Jan 14, 2026
Weak Password Requirements vulnerability in Apache Fineract. This issue affects Apache Fineract:... High Unreviewed
CVE-2025-23408 was published Dec 12, 2025
An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an... Critical Unreviewed
CVE-2025-53963 was published Dec 4, 2025
The password change endpoint in Open Source Point of Sale 3.4.1 allows users to set their account... High Unreviewed
CVE-2025-63800 was published Nov 18, 2025
LibreNMS has Weak Password Policy Low
CVE-2025-65014 was published for librenms/librenms (Composer) Nov 18, 2025
marcelomulder Credited to marcelomulder
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database