Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,624
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

13 advisories

Loading
IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic... Moderate Unreviewed
CVE-2025-36271 was published Aug 29, 2026
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project... High Unreviewed
CVE-2026-57263 was published Aug 11, 2026
A cryptographic weakness exists in affected Omada devices where site credentials are protected... Moderate Unreviewed
CVE-2025-15631 was published Aug 3, 2026
A cryptographic weakness exists in the Omada device adoption process.  During adoption,... Moderate Unreviewed
CVE-2025-15544 was published Aug 3, 2026
jasypt-spring-boot Uses a One-Way Hash without a Salt Low
CVE-2026-9370 was published for com.github.ulisesbocchio:jasypt-spring-boot (Maven) May 26, 2026
electerm's encrypt method not safe enough Moderate
CVE-2026-45787 was published for electerm (npm) May 14, 2026
amwhoi Credited to amwhoi
IBM Concert 1.0.0 through 2.1.0 uses weaker than expected cryptographic algorithms that could... Moderate Unreviewed
CVE-2025-36253 was published Feb 3, 2026
Use of a One-Way Hash with a Predictable Salt vulnerability in ABB FLXEON.This issue affects... Critical Unreviewed
CVE-2025-10205 was published Sep 17, 2025
NeuVector has an insecure password storage and is vulnerable to rainbow attack Moderate
CVE-2025-53884 was published for github.com/neuvector/neuvector (Go) Aug 28, 2025
holyspectral Credited to holyspectral
Manifest Uses a One-Way Hash without a Salt Moderate
CVE-2025-27408 was published for manifest (npm) Mar 3, 2025
prokofitch Credited to prokofitch
IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash... Moderate Unreviewed
CVE-2023-33838 was published Jan 29, 2025
The FluentCRM - Marketing Automation For WordPress plugin for WordPress is vulnerable to... Low Unreviewed
CVE-2023-1430 was published Jun 9, 2023
A vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data... High Unreviewed
CVE-2020-25164 was published Apr 15, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database