Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

625 advisories

Loading
In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by... Critical Unreviewed
CVE-2026-116238 was published Oct 30, 2026
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of... Moderate Unreviewed
CVE-2026-111501 was published Oct 30, 2026
HTTP basic auth enforces no retry limit or backoff. Combined with the default service password,... Moderate Unreviewed
CVE-2026-22114 was published Oct 30, 2026
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield allows... Unknown Unreviewed
CVE-2026-107256 was published Oct 30, 2026
Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and... Moderate Unreviewed
CVE-2026-15586 was published Oct 27, 2026
@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL Low
GHSA-44jh-23m7-hpcf was published for @better-auth/drizzle-adapter (npm) Oct 27, 2026
designorant Credited to designorant
The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second... Moderate Unreviewed
CVE-2026-107145 was published Oct 27, 2026
boneIO Black does not limit authentication attempts on its web interface (POST /api/login) or SSH... Low Unreviewed
CVE-2026-77057 was published Oct 26, 2026
A weakness has been identified in NocoDB up to 2026.07.0. The affected element is the function... Moderate Unreviewed
CVE-2026-116123 was published Oct 26, 2026
A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The impacted element... Low Unreviewed
CVE-2026-116007 was published Oct 25, 2026
ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessing Moderate
CVE-2026-113710 was published for apostrophe (npm) Oct 20, 2026
thotamurari Credited to thotamurari
A vulnerability in the proprietary protocol could allow an attacker to brute force the... High Unreviewed
CVE-2026-43847 was published Oct 20, 2026
The RemoteUserStoreManagerService does not sufficiently validate password change attempts when... Moderate Unreviewed
CVE-2024-2323 was published Oct 20, 2026
A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file... Low Unreviewed
CVE-2026-111874 was published Oct 18, 2026
phpMyFAQ 4.2.0-alpha before 4.2.0-beta lacks effective rate limiting on the unauthenticated user... Moderate Unreviewed
CVE-2026-111892 was published Oct 17, 2026
phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta lacks brute-force lockout in the... High Unreviewed
CVE-2026-111886 was published Oct 17, 2026
Course-tencent-cloud through 2.0.1 contains an improper restriction of authentication attempts... Critical Unreviewed
CVE-2026-111675 was published Oct 16, 2026
MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code... Critical Unreviewed
CVE-2026-111356 was published Oct 16, 2026
Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better... Moderate Unreviewed
CVE-2026-110861 was published Oct 15, 2026
Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows... Critical Unreviewed
CVE-2026-110770 was published Oct 14, 2026
An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows... Low Unreviewed
CVE-2026-93637 was published Oct 14, 2026
FreeRDP 3.0.0 before 3.32.0 contains an improper restriction of excessive authentication attempts... High Unreviewed
CVE-2026-109949 was published Oct 13, 2026
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to... Moderate Unreviewed
CVE-2026-18318 was published Oct 13, 2026
Netherman Portal del Hermano (portaldelhermano.es) before 2026-10-06 contains a broken... Critical Unreviewed
CVE-2026-53997 was published Oct 12, 2026
AniWorld Downloader before 5.3.0 contains an improper restriction of authentication attempts... Moderate Unreviewed
CVE-2026-108580 was published Oct 10, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database