GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
37
GitHub Actions
36
Go
2,500
Maven
5,000+
npm
4,147
NuGet
735
pip
3,948
Pub
12
RubyGems
945
Rust
1,025
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
174 advisories
Filter by severity
Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0...
High
Unreviewed
CVE-2025-46409
was published
Aug 28, 2025
jsrsasign v11.1.0 was discovered to contain weak encryption.
High
Unreviewed
CVE-2025-45764
was published
Aug 6, 2025
php-jwt v6.11.0 was discovered to contain weak encryption.
High
Unreviewed
CVE-2025-45769
was published
Jul 31, 2025
jwt v5.4.3 was discovered to contain weak encryption.
High
Unreviewed
CVE-2025-45770
was published
Jul 31, 2025
Brocade ASCG before 3.3.0 allows for the use of medium strength cryptography algorithms on...
High
Unreviewed
CVE-2025-7398
was published
Jul 18, 2025
In Modem, there is a possible information disclosure due to incorrect error handling. This could...
High
Unreviewed
CVE-2025-20667
was published
May 5, 2025
Reuse of a static AES key and initialization vector for encrypted traffic to the 'ate' management...
High
Unreviewed
CVE-2025-46626
was published
May 2, 2025
A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC...
High
Unreviewed
CVE-2024-54089
was published
Feb 11, 2025
An unauthenticated local attacker can decrypt the devices config file and therefore compromise...
High
Unreviewed
CVE-2024-45273
was published
Oct 15, 2024
An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive...
High
Unreviewed
CVE-2024-41594
was published
Oct 3, 2024
The swctrl service is used to detect and remotely manage PLANET Technology devices. For certain...
High
Unreviewed
CVE-2024-8455
was published
Sep 30, 2024
OpenSlides 4.0.15 was discovered to be using a weak hashing algorithm to store passwords.
High
Unreviewed
CVE-2024-22892
was published
Sep 25, 2024
Insufficient or weak TLS protocol version identified in Advance authentication client server...
High
Unreviewed
CVE-2021-38121
was published
Aug 28, 2024
Inadequate encryption strength for some BMRA software before version 22.08 may allow an...
High
Unreviewed
CVE-2024-21787
was published
Aug 14, 2024
Diffie-Hellman groups with insufficient strength are used in the SSL/TLS stack of B&R Automation...
High
Unreviewed
CVE-2024-5800
was published
Aug 12, 2024
Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow...
High
Unreviewed
CVE-2024-42163
was published
Aug 12, 2024
Inadequate Encryption Strength vulnerability allow an authenticated attacker to execute arbitrary...
High
Unreviewed
CVE-2024-21881
was published
Aug 12, 2024
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.64), SIPROTEC...
High
Unreviewed
CVE-2024-38867
was published
Jul 9, 2024
When a Brocade SANnav installation is upgraded from Brocade SANnav v2.2.2 to Brocade SANnav 2.3.0...
High
Unreviewed
CVE-2024-29969
was published
Apr 19, 2024
The class FileTransfer implemented in Brocade SANnav before v2.3.1, v2.3.0a, uses the ssh-rsa...
High
Unreviewed
CVE-2024-29950
was published
Apr 17, 2024
This vulnerability exists in USB Pratirodh due to the usage of a weaker cryptographic algorithm ...
High
Unreviewed
CVE-2024-1224
was published
Mar 6, 2024
This vulnerability exists in AppSamvid software due to the usage of a weaker cryptographic...
High
Unreviewed
CVE-2024-25102
was published
Mar 6, 2024
An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated...
High
Unreviewed
CVE-2023-30132
was published
Oct 19, 2023
Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength...
High
Unreviewed
CVE-2023-4129
was published
Sep 27, 2023
Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS...
High
Unreviewed
CVE-2023-41305
was published
Sep 27, 2023
ProTip!
Advisories are also available from the
GraphQL API