Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,575
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,523
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

164 advisories

Loading
The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an... Moderate Unreviewed
CVE-2026-72861 was published Aug 20, 2026
The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of... Moderate Unreviewed
CVE-2026-50720 was published Aug 19, 2026
A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an... Moderate Unreviewed
CVE-2026-74244 was published Aug 15, 2026
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized... Moderate Unreviewed
CVE-2026-62757 was published Aug 11, 2026
SAP Approuter does not consistently enforce integrity verification on certain session-related... Moderate Unreviewed
CVE-2026-66776 was published Aug 11, 2026
Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional... Moderate Unreviewed
CVE-2026-59112 was published Aug 10, 2026
Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a... Moderate Unreviewed
CVE-2026-17872 was published Jul 30, 2026
Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature... Moderate Unreviewed
CVE-2026-13305 was published Jul 29, 2026
A TOTP two-factor authentication bypass vulnerability in Koollab LMS allowed an attacker to... Moderate Unreviewed
CVE-2026-63237 was published Jul 29, 2026
BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to... Moderate Unreviewed
CVE-2026-10723 was published Jul 22, 2026
The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Payment Bypass... Moderate Unreviewed
CVE-2026-9027 was published Jul 9, 2026
The HCL Traveler for Microsoft Outlook libraries are being flagged as potentially malicious... Moderate Unreviewed
CVE-2024-23581 was published Jun 26, 2026
PKCS#12 MAC verification uses an attacker-controlled comparison length, weakening the integrity... Moderate Unreviewed
CVE-2026-6329 was published Jun 26, 2026
PKCS7_verify signer confusion allows forged signatures, where the signer associated with a... Moderate Unreviewed
CVE-2026-7511 was published Jun 26, 2026
Unauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions. Moderate Unreviewed
CVE-2026-42743 was published Jun 15, 2026
Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass. Moderate Unreviewed
CVE-2025-67903 was published May 27, 2026
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected... Moderate Unreviewed
CVE-2026-24032 was published Apr 14, 2026
A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a... Moderate Unreviewed
CVE-2026-2625 was published Apr 3, 2026
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing... Moderate Unreviewed
CVE-2026-20699 was published Mar 25, 2026
Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability.... Moderate Unreviewed
CVE-2026-3562 was published Mar 16, 2026
Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15... Moderate Unreviewed
CVE-2026-20997 was published Mar 16, 2026
Improper verification of cryptographic signature in Font Settings prior to SMR Mar-2026 Release 1... Moderate Unreviewed
CVE-2026-20989 was published Mar 16, 2026
Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows... Moderate Unreviewed
CVE-2026-21002 was published Mar 16, 2026
HCL AION is affected by a vulnerability where offering images are not digitally signed. Lack of... Moderate Unreviewed
CVE-2025-52648 was published Mar 16, 2026
SEPPmail Secure Email Gateway before version 15.0.1 does not properly communicate PGP signature... Moderate Unreviewed
CVE-2026-2746 was published Mar 4, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database