Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,583
Rust
21

27 advisories

Loading
Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Authentication... Low Unreviewed
CVE-2026-91896 was published Nov 2, 2026
A vulnerability in the SSID bring-your-own-device (BYOD) onboarding workflow of Cisco ISE could... Low Unreviewed
CVE-2026-20071 was published Sep 16, 2026
The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a... Low Unreviewed
CVE-2026-89327 was published Sep 16, 2026
An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access... Low Unreviewed
CVE-2026-0292 was published Aug 13, 2026
In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy... Low Unreviewed
CVE-2026-54478 was published Jul 22, 2026
OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the... Low Unreviewed
CVE-2026-62224 was published Jul 17, 2026
Limited authentication bypass by spoofing vulnerability in Progress MOVEit Transfer (HTTPS module... Low Unreviewed
CVE-2026-8651 was published Jul 8, 2026
Authentication Bypass by Spoofing vulnerability in opa plugin. An attacker could relay spoofed... Low Unreviewed
CVE-2026-49231 was published Jun 19, 2026
OpenClaw Google Chat spoofing access with allowlist authorized mutable email principal despite sender-ID mismatch Low
GHSA-chm2-m3w2-wcxm was published for clawdbot (npm) Feb 17, 2026
vincentkoc Credited to vincentkoc
Microsoft Edge (Chromium-based) Spoofing Vulnerability Low Unreviewed
CVE-2025-65046 was published Dec 19, 2025
Spoofing issue in Firefox. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, and... Low Unreviewed
CVE-2025-13015 was published Nov 11, 2025
In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic... Low Unreviewed
CVE-2025-26419 was published Sep 4, 2025
In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a... Low Unreviewed
CVE-2025-26428 was published Sep 4, 2025
In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of... Low Unreviewed
CVE-2024-54158 was published Dec 4, 2024
Authentication Bypass by Spoofing vulnerability in Peter Hardy-vanDoorn Maintenance Redirect... Low Unreviewed
CVE-2024-45453 was published Sep 23, 2024
Incorrect Authorization vulnerability in Yassine Idrissi Maintenance & Coming Soon Redirect... Low Unreviewed
CVE-2024-43944 was published Aug 29, 2024
A low severity vulnerability in BIPS has been identified where an attacker with high privileges... Low Unreviewed
CVE-2024-5812 was published Jun 11, 2024
Authentication Bypass by Spoofing vulnerability in Acurax Under Construction / Maintenance Mode... Low Unreviewed
CVE-2024-35749 was published Jun 10, 2024
Authentication Bypass by Spoofing vulnerability in wpdevart Coming soon and Maintenance mode... Low Unreviewed
CVE-2023-49741 was published Jun 4, 2024
Authentication Bypass by Spoofing vulnerability in WP Maintenance allows Accessing Functionality... Low Unreviewed
CVE-2023-47769 was published Jun 4, 2024
Authentication Bypass by Spoofing vulnerability in helderk Maintenance Mode allows Functionality... Low Unreviewed
CVE-2024-32708 was published May 17, 2024
Authentication Bypass by Spoofing vulnerability in Pippin Williamson CGC Maintenance Mode allows... Low Unreviewed
CVE-2024-30480 was published May 17, 2024
Authentication Bypass by Spoofing vulnerability in Filipe Seabra WordPress Manutenção allows... Low Unreviewed
CVE-2024-22139 was published May 17, 2024
Keycloak vulnerable to impersonation via logout token exchange Low
CVE-2023-0657 was published for org.keycloak:keycloak-services (Maven) Apr 17, 2024
Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes Low
CVE-2023-41329 was published for com.github.tomakehurst:wiremock-jre8 (Maven) Sep 8, 2023
W0rty Credited to W0rty, numacanedo, tomakehurst, Mahoney, and oleg-nenashev numacanedo numacanedo
tomakehurst tomakehurst Mahoney Mahoney oleg-nenashev oleg-nenashev
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database