Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,191
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,586
Rust
21

247 advisories

Loading
Plaintext Storage of a Password (CWE-256) in the SecurityManager shared configuration in... Moderate Unreviewed
CVE-2026-121021 was published Nov 3, 2026
Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies... High Unreviewed
CVE-2026-86715 was published Oct 30, 2026
ServiceNow has remediated an information disclosure vulnerability that was identified in the... High Unreviewed
CVE-2026-103094 was published Oct 29, 2026
A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the... High Unreviewed
CVE-2026-110975 was published Oct 23, 2026
WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in... High Unreviewed
CVE-2026-63315 was published Oct 15, 2026
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of... Moderate Unreviewed
CVE-2026-70414 was published Oct 6, 2026
IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible... High Unreviewed
CVE-2026-84884 was published Sep 25, 2026
On affected platforms running Arista EOS with OpenConfig-related services (i.e., gNMI, gNSI,... Moderate Unreviewed
CVE-2026-2380 was published Sep 16, 2026
Plaintext storage of a password issue exists in CONPROSYS nano Series . If this vulnerability is... Moderate Unreviewed
CVE-2026-82783 was published Sep 14, 2026
Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows... High Unreviewed
CVE-2026-19051 was published Sep 4, 2026
OptimiDoc Server (On-Premise) stores credentials for external services in cleartext. An... Moderate Unreviewed
CVE-2026-15933 was published Sep 3, 2026
HDD password plaintext is stored in a UEFI variable. High Unreviewed
CVE-2021-38489 was published Sep 3, 2026
rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in... High Unreviewed
CVE-2026-82453 was published Aug 29, 2026
Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database ... High Unreviewed
CVE-2026-50641 was published Jul 29, 2026
Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw... Moderate Unreviewed
CVE-2026-41874 was published Jul 28, 2026
Weintek cMT3092X HMI stores user account passwords in plaintext. High Unreviewed
CVE-2026-61886 was published Jul 25, 2026
Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password... High Unreviewed
CVE-2026-40430 was published Jul 24, 2026
A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability... Low Unreviewed
CVE-2026-44187 was published Jul 22, 2026
Credentials of built-in users are insecurely stored in the User directory of PcVue projects, all... Moderate Unreviewed
CVE-2026-14867 was published Jul 7, 2026
Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding Low
CVE-2026-50268 was published for Steeltoe.Configuration.Encryption (NuGet) Jul 2, 2026
Lemur user-update path stores plaintext passwords Moderate
CVE-2026-55164 was published for lemur (pip) Jun 25, 2026
sour-exploit Credited to sour-exploit
Jenkins FitNesse Plugin stores passwords unencrypted Moderate
CVE-2026-57302 was published for org.jenkins-ci.plugins:fitnesse (Maven) Jun 24, 2026
motionEye: Authentication possible via password hash Critical
CVE-2026-46488 was published for motioneye (pip) Jun 22, 2026
FireByteApplications Credited to FireByteApplications, 0xLynk, dimashn04, C4spr0x1A, sighnwaive, MichaIng, Marijn0, and zagrim 0xLynk 0xLynk
dimashn04 dimashn04 C4spr0x1A C4spr0x1A sighnwaive sighnwaive MichaIng MichaIng Marijn0 Marijn0 zagrim zagrim
update_disk_psu_baseline.sh requires password in plain text High Unreviewed
CVE-2024-39575 was published Jun 16, 2026
IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be... Moderate Unreviewed
CVE-2024-45636 was published Jun 11, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database