Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,596
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

19 advisories

Loading
A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11... Moderate Unreviewed
CVE-2026-109971 was published Oct 14, 2026
In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL... Moderate Unreviewed
CVE-2026-102371 was published Sep 29, 2026
microsandbox: Secret values exposed in world-readable process arguments Moderate
CVE-2026-61670 was published for microsandbox (Rust) Sep 22, 2026
nopcorn Credited to nopcorn
A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability... Moderate Unreviewed
CVE-2026-92745 was published Sep 18, 2026
A flaw was found in `cockpit-machines`. This vulnerability allows a local attacker with the... Moderate Unreviewed
CVE-2026-92747 was published Sep 18, 2026
A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose... Moderate Unreviewed
CVE-2026-92768 was published Sep 18, 2026
In openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8, the desktop GUI passes the... Moderate Unreviewed
CVE-2026-81684 was published Aug 27, 2026
A flaw was found in the ipa_getkeytab module of the community.general Ansible collection. The... Moderate Unreviewed
CVE-2026-80158 was published Aug 27, 2026
NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process... Moderate Unreviewed
CVE-2026-65088 was published Aug 25, 2026
Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM... Moderate Unreviewed
CVE-2026-18915 was published Aug 6, 2026
Tanium addressed an information disclosure vulnerability in Connect. Moderate Unreviewed
CVE-2026-12139 was published Jul 21, 2026
An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu... Moderate Unreviewed
CVE-2026-9494 was published Jul 16, 2026
PraisonAI Vulnerable to Sensitive Environment Variable Exposure via Untrusted MCP Subprocess Execution Moderate
CVE-2026-40159 was published for PraisonAI (pip) Apr 10, 2026
l3tchupkt Credited to l3tchupkt
A malicious ACAP application can gain access to admin-level service account credentials used by... Moderate Unreviewed
CVE-2025-5452 was published Nov 11, 2025
A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker... Moderate Unreviewed
CVE-2025-53860 was published Oct 15, 2025
IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0... Moderate Unreviewed
CVE-2025-1333 was published May 2, 2025
Arctera eDiscovery Platform before 10.3.2, when Enterprise Vault Collection Module is used,... Moderate Unreviewed
CVE-2025-32987 was published Apr 15, 2025
IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0... Moderate Unreviewed
CVE-2024-28799 was published Aug 14, 2024
Veracode Scan Jenkins Plugin vulnerable to information disclosure Moderate
CVE-2023-25722 was published for com.veracode.jenkins:veracode-scan (Maven) Mar 28, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database