Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

11 advisories

Loading
Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows... High Unreviewed
CVE-2026-57948 was published Jun 29, 2026
This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure... High Unreviewed
CVE-2025-53757 was published Jul 16, 2025
This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used... High Unreviewed
CVE-2025-0479 was published Jan 20, 2025
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions ... High Unreviewed
CVE-2024-35211 was published Jun 11, 2024
Session Hijacking vulnerability in Hitachi Ops Center Analyzer.This issue affects Hitachi Ops... High Unreviewed
CVE-2024-2493 was published Apr 23, 2024
Macaron csrf missing encryption and has sensitive cookies in HTTP session without secure attribute High
CVE-2018-25060 was published for github.com/go-macaron/csrf (Go) Dec 30, 2022
phpMyFAQ has insecure HTTP cookies High
CVE-2022-4409 was published for thorsten/phpmyfaq (Composer) Dec 11, 2022
rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute High
CVE-2022-3174 was published for rdiffweb (pip) Sep 14, 2022
Within the Service Desk module of the ITarian platform (SAAS and on-premise), a remote attacker... High Unreviewed
CVE-2022-25151 was published Jun 10, 2022
Mattermost Server does not check if cookies are used over SSL High
CVE-2016-11076 was published for github.com/mattermost/mattermost-server (Go) May 24, 2022
Sensitive Cookie Without HttpOnly and Secure Flag High
CVE-2017-1000046 was published for mautic/core (Composer) May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database