Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,191
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,584
Rust
21

602 advisories

Loading
Strands Agents: Default FileSessionManager storage is world-readable on shared systems Moderate
GHSA-763v-5pjm-fx36 was published for strands-agents (pip) Oct 27, 2026
whyiug Credited to whyiug
obsidian-tc: Default folder ACL is fail-open; .obsidian plugin secrets are readable by default Moderate
CVE-2026-77364 was published for obsidian-tc (npm) Oct 23, 2026
suavecito585 Credited to suavecito585
Incorrect Default Permissions vulnerability in Apache Camel PQC component. This issue affects... Moderate Unreviewed
CVE-2026-85300 was published Oct 19, 2026
Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The... Moderate Unreviewed
CVE-2026-108072 was published Oct 14, 2026
Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These... Moderate Unreviewed
CVE-2026-78413 was published Oct 5, 2026
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows... Moderate Unreviewed
CVE-2026-6718 was published Sep 23, 2026
Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default... Moderate Unreviewed
CVE-2026-82163 was published Sep 21, 2026
Dell Command | Integration Suite for System Center, versions prior to 6.7.2, contain an Incorrect... Moderate Unreviewed
CVE-2026-82165 was published Sep 21, 2026
Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows... Moderate Unreviewed
CVE-2026-92252 was published Sep 20, 2026
Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability.... Moderate Unreviewed
CVE-2026-18273 was published Aug 20, 2026
HCL AION is affected by a vulnerability where the shared storage used by product components is... Moderate Unreviewed
CVE-2025-52640 was published Aug 13, 2026
In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary... Moderate Unreviewed
CVE-2026-65940 was published Aug 12, 2026
turso-cli persists Turso platform JWT with world-readable (0o644) file permissions Moderate
CVE-2026-48790 was published for github.com/tursodatabase/turso-cli (Go) Jun 26, 2026
In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user... Moderate Unreviewed
CVE-2026-57924 was published Jun 26, 2026
nextflow auth login command has incorrect default permissions Moderate
CVE-2026-48722 was published for io.nextflow:nextflow (Maven) Jun 25, 2026
Duplicate Advisory: Nuxt dev server vite-node IPC socket is world-connectable on Linux Moderate
GHSA-2x6f-57hp-86fx was published for nuxt (npm) Jun 23, 2026 • withdrawn
OpenClaw: Config recovery could restore openclaw.json with broad file permissions Moderate
CVE-2026-53856 was published for openclaw (npm) Jun 18, 2026
Kaze310 Credited to Kaze310
Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644) Moderate
CVE-2026-53870 was published for hermes-agent (pip) Jun 17, 2026
Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a... Moderate Unreviewed
CVE-2025-15642 was published Jun 17, 2026
Nuxt dev server vite-node IPC socket is world-connectable on Linux Moderate
CVE-2026-56301 was published for nuxt (npm) Jun 16, 2026
alcls01111 Credited to alcls01111
Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and... Moderate Unreviewed
CVE-2026-50255 was published Jun 16, 2026
Incorrect default permissions in Kiro IDE on macOS and Linux before version 0.11.133 could expose... Moderate Unreviewed
CVE-2026-11931 was published Jun 15, 2026
Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows... Moderate Unreviewed
CVE-2026-8487 was published May 20, 2026
Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could... Moderate Unreviewed
CVE-2025-48516 was published May 15, 2026
Hiseeu C90 v5.7.15 is vulnerable to Insecure Permissions. The UART bootloader is accessible when... Moderate Unreviewed
CVE-2026-36742 was published May 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database