Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,584
Rust
21

87 advisories

Loading
An LDAP filter injection vulnerability in Zimbra Collaboration Suite (ZCS) allows an... Moderate Unreviewed
CVE-2026-93636 was published Oct 23, 2026
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19... High Unreviewed
CVE-2026-15723 was published Oct 22, 2026
LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated... Moderate Unreviewed
CVE-2026-93635 was published Oct 14, 2026
Improper neutralization of special elements used in an LDAP query ('LDAP injection')... High Unreviewed
CVE-2026-89071 was published Oct 14, 2026
Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth... Moderate Unreviewed
CVE-2026-110256 was published Oct 13, 2026
A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that... Moderate Unreviewed
CVE-2026-10759 was published Oct 13, 2026
Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because... Moderate Unreviewed
CVE-2025-71431 was published Oct 13, 2026
LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad... Critical Unreviewed
CVE-2026-109357 was published Oct 12, 2026
Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2... Critical Unreviewed
CVE-2026-94053 was published Sep 30, 2026
LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and role lookup by... High Unreviewed
CVE-2026-90979 was published Sep 28, 2026
Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion Moderate
CVE-2026-11748 was published for com.linecorp.centraldogma:centraldogma-server-auth-shiro (Maven) Sep 11, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... Moderate Unreviewed
CVE-2026-80055 was published Sep 9, 2026
The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating... Moderate Unreviewed
CVE-2026-78579 was published Sep 8, 2026
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')... Moderate Unreviewed
CVE-2026-81205 was published Sep 2, 2026
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')... High Unreviewed
CVE-2026-75020 was published Aug 27, 2026
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')... High Unreviewed
CVE-2026-19271 was published Aug 26, 2026
In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with... Moderate Unreviewed
CVE-2026-76373 was published Aug 20, 2026
A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP)... Moderate Unreviewed
CVE-2026-74241 was published Aug 15, 2026
Fabric CA Developer's Guide: LDAP Injection via Unescaped Username in GetUser Filter Moderate
CVE-2026-53658 was published for github.com/hyperledger/fabric-ca (Go) Aug 14, 2026
brodmart Credited to brodmart and bestbeforetoday bestbeforetoday bestbeforetoday
A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user... Moderate Unreviewed
CVE-2026-16071 was published Aug 5, 2026
In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper. Moderate Unreviewed
CVE-2026-59652 was published Aug 3, 2026
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP... High Unreviewed
CVE-2026-11770 was published Jul 31, 2026
LDAP filter injection vulnerability in Apache Zeppelin. LdapRealm used RFC 4514 distinguished... Moderate Unreviewed
CVE-2026-44617 was published Jul 30, 2026
LDAP injection vulnerability in Apache Zeppelin. ActiveDirectoryGroupRealm constructed LDAP... Moderate Unreviewed
CVE-2026-44616 was published Jul 30, 2026
A security flaw combining LDAP filter injection and improper authorization checks was found in... High Unreviewed
CVE-2026-58222 was published Jul 30, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database