Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

26 advisories

Loading
Unless the application explicitly raises smbMinVersion, the jCIFS client will negotiate down to... Moderate Unreviewed
CVE-2026-59293 was published Aug 27, 2026
An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable... Critical Unreviewed
CVE-2026-18691 was published Aug 11, 2026
PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms High
CVE-2026-54291 was published for org.postgresql:postgresql (Maven) Jul 21, 2026
KEIJOT Credited to KEIJOT
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specifically crafted message... Moderate Unreviewed
CVE-2026-4942 was published Jul 17, 2026
Better Auth has insecure cryptographic defaults in oidcProvider: alg=none advertised and plain PKCE accepted by default High
GHSA-9h47-pqcx-hjr4 was published for better-auth (npm) Jul 7, 2026
subhanUmer Credited to subhanUmer
OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms High
CVE-2026-53712 was published for com.ongres.scram:scram-client (Maven) Jul 1, 2026
KEIJOT Credited to KEIJOT and jorsol jorsol jorsol
When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fall back to MAC-then-Encrypt... Low Unreviewed
CVE-2026-6092 was published Jun 26, 2026
CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass Low
CVE-2026-54780 was published for CoreWCF.Primitives (NuGet) Jun 19, 2026
Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade Moderate
CVE-2026-48747 was published for symfony/mailomat-mailer (Composer) Jun 15, 2026
KEJJ0 Credited to KEJJ0, xpw6, Wele44, and nicolas-grekas xpw6 xpw6
Wele44 Wele44 nicolas-grekas nicolas-grekas
AWS Encryption SDK for Python: Key commitment policy bypass via shared key cache Moderate
CVE-2026-6550 was published for aws-encryption-sdk (pip) Apr 24, 2026
Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable ... High Unreviewed
CVE-2026-32650 was published Apr 17, 2026
Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key... High Unreviewed
CVE-2026-2673 was published Mar 13, 2026
When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will... High Unreviewed
CVE-2025-10693 was published Oct 31, 2025
psPAS PowerShell module does not explicitly enforce TLS 1.2 within the 'Get-PASSAMLResponse'... Low Unreviewed
CVE-2025-59270 was published Sep 16, 2025
Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm... Moderate Unreviewed
CVE-2025-36582 was published Jul 1, 2025
SIMPLE.ERP client is vulnerable to MS SQL protocol downgrade request from a server side, what... High Unreviewed
CVE-2024-8773 was published Mar 24, 2025
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS... Critical Unreviewed
CVE-2025-24154 was published Jan 28, 2025
Wapro ERP Desktop is vulnerable to MS SQL protocol downgrade request from a server side, what... Critical Unreviewed
CVE-2024-4995 was published Dec 18, 2024
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly... Critical Unreviewed
CVE-2024-38883 was published Aug 2, 2024
In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a... Moderate Unreviewed
CVE-2024-20069 was published Jun 3, 2024
IBM Security Directory Suite 8.0.1 uses weaker than expected cryptographic algorithms that could... High Unreviewed
CVE-2022-33160 was published Oct 7, 2023
Legacy pairing and secure-connections pairing authentication in Bluetooth® BR/EDR Core... Moderate Unreviewed
CVE-2020-10135 was published May 24, 2022
Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The software does not... Moderate Unreviewed
CVE-2020-16200 was published May 24, 2022
Inadequate Encryption Strength and Algorithm Downgrade in Wildfly Moderate Unreviewed
CVE-2019-14887 was published Feb 15, 2022
Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the... Moderate Unreviewed
CVE-2021-36326 was published Dec 1, 2021
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database