Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,771
Maven
5,000+
npm
5,000+
NuGet
1,124
pip
5,000+
Pub
13
RubyGems
1,152
Rust
1,576
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
20
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

96 advisories

Loading
Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data... Moderate Unreviewed
CVE-2026-89173 was published Sep 11, 2026
Observable response discrepancy vulnerability in DernekPlus Website Template allows Account... Moderate Unreviewed
CVE-2026-9161 was published Sep 10, 2026
Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature can lead to information... Moderate Unreviewed
CVE-2026-78584 was published Sep 2, 2026
Automatisch reveals whether an address is registered through the response to its forgot-password... Moderate Unreviewed
CVE-2026-81033 was published Aug 26, 2026
Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, so an... Moderate Unreviewed
CVE-2026-75575 was published Aug 25, 2026
Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user... Moderate Unreviewed
CVE-2026-14672 was published Aug 13, 2026
A user enumeration vulnerability in bluewave-labs/Checkmate through 2.1.0 allows an... Moderate Unreviewed
CVE-2026-72588 was published Aug 10, 2026
Observable response discrepancy vulnerability in Bilin Software and Informatics Consultancy Inc.... Moderate Unreviewed
CVE-2026-14202 was published Aug 4, 2026
HCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can use... Moderate Unreviewed
CVE-2024-23574 was published Jul 17, 2026
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an ESEARCH cross... Moderate Unreviewed
CVE-2026-47083 was published Jul 16, 2026
Rejetto HFS 3.0.0 through 3.2.0 returns observably different responses from its login endpoint... Moderate Unreviewed
CVE-2026-61503 was published Jul 13, 2026
MCO is vulnerable to User Enumeration through authentication-related functionalities. The... Moderate Unreviewed
CVE-2026-53908 was published Jul 1, 2026
The check user account lock states feature within the email OTP flow fails to validate user input... Moderate Unreviewed
CVE-2024-0391 was published May 11, 2026
A vulnerability in an identity management API endpoint of Cisco ISE could allow an... Moderate Unreviewed
CVE-2026-20195 was published May 6, 2026
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). ... Moderate Unreviewed
CVE-2026-34319 was published Apr 21, 2026
During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system returns... Moderate Unreviewed
CVE-2026-34264 was published Apr 14, 2026
The login mechanism of Sage DPW 2025_06_004 displays distinct responses for valid and invalid... Moderate Unreviewed
CVE-2025-67807 was published Apr 1, 2026
User enumeration in ESET Protect (on-prem) via Response Timing. Moderate Unreviewed
CVE-2025-3716 was published Mar 30, 2026
IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an... Moderate Unreviewed
CVE-2025-13460 was published Mar 16, 2026
Raytha CMS is vulnerable to User Enumeration in password reset functionality. Difference in... Moderate Unreviewed
CVE-2025-69243 was published Mar 16, 2026
Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43,... Moderate Unreviewed
CVE-2026-24097 was published Mar 13, 2026
Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43,... Moderate Unreviewed
CVE-2026-2859 was published Mar 13, 2026
Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing.... Moderate Unreviewed
CVE-2025-12455 was published Mar 13, 2026
A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery... Moderate Unreviewed
CVE-2026-26744 was published Feb 20, 2026
DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset... Moderate Unreviewed
CVE-2019-25338 was published Feb 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database