GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+
232 advisories
Filter by severity
An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones...
High
Unreviewed
CVE-2021-22932
was published
May 24, 2022
ECOA BAS controller stores sensitive data (backup exports) in clear-text, thus the...
High
Unreviewed
CVE-2021-41302
was published
May 24, 2022
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists that could allow...
High
Unreviewed
CVE-2022-30237
was published
Jun 3, 2022
AES OCB fails to encrypt some bytes
High
CVE-2022-2097
was published
for
openssl-src
(Rust)
Jul 6, 2022
rdiffweb 2.4.1 vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
High
CVE-2022-3174
was published
for
rdiffweb
(pip)
Sep 14, 2022
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/AXAssets/default_axess/axess...
High
Unreviewed
CVE-2020-15340
was published
Sep 30, 2022
phpMyFAQ has insecure HTTP cookies
High
CVE-2022-4409
was published
for
thorsten/phpmyfaq
(Composer)
Dec 11, 2022
Noise vulnerable to denial of service
High
CVE-2021-4239
was published
for
github.com/flynn/noise
(Go)
Dec 28, 2022
Macaron csrf missing encryption and has sensitive cookies in HTTP session without secure attribute
High
CVE-2018-25060
was published
for
github.com/go-macaron/csrf
(Go)
Dec 30, 2022
The myMail app through 14.30 for iOS sends cleartext credentials in a situation where STARTTLS is...
High
Unreviewed
CVE-2023-32290
was published
May 7, 2023
Dell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data...
High
Unreviewed
CVE-2023-28045
was published
May 19, 2023
An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely...
High
Unreviewed
CVE-2023-34258
was published
May 31, 2023
The physical IoT device of the AliveCor's KardiaMobile, a smartphone-based personal...
High
Unreviewed
CVE-2022-41627
was published
Jul 6, 2023
HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured
High
CVE-2023-0690
was published
for
github.com/hashicorp/boundary
(Go)
Jul 6, 2023
Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An...
High
Unreviewed
CVE-2023-30602
was published
Jul 6, 2023
Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored...
High
Unreviewed
CVE-2023-37192
was published
Jul 7, 2023
An issue found in KEISEI STORE Co, Ltd. LIVRE KEISEI v.13.6.1 allows a remote attacker to gain...
High
Unreviewed
CVE-2023-31819
was published
Jul 13, 2023
An issue found in Shizutetsu Store v.13.6.1 allows a remote attacker to gain access to sensitive...
High
Unreviewed
CVE-2023-31820
was published
Jul 13, 2023
An issue found in Inageya v.13.4.1 allows a remote attacker to gain access to sensitive...
High
Unreviewed
CVE-2023-31825
was published
Jul 13, 2023
An issue found in Entetsu Store v.13.4.1 allows a remote attacker to gain access to sensitive...
High
Unreviewed
CVE-2023-31822
was published
Jul 13, 2023
twitch-tui's connection is not encrypted
High
CVE-2023-38688
was published
for
twitch-tui
(Rust)
Jul 31, 2023
A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to...
High
Unreviewed
CVE-2023-4420
was published
Aug 24, 2023
IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather or persuade a naive user to...
High
Unreviewed
CVE-2022-22401
was published
Sep 9, 2023
IBM Security Verify Governance 10.0 does not encrypt sensitive or critical information before...
High
Unreviewed
CVE-2023-33837
was published
Oct 23, 2023
Vulnerability of missing encryption in the card management module. Successful exploitation of...
High
Unreviewed
CVE-2023-44098
was published
Nov 8, 2023
ProTip!
Advisories are also available from the
GraphQL API