Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,636
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,529
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

45 advisories

Loading
In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound is configured with the ... Moderate Unreviewed
CVE-2026-50243 was published Jul 22, 2026
FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in the IPRateLimit class that... High Unreviewed
CVE-2026-64619 was published Jul 20, 2026
Glance through 0.8.5 contains an IP address spoofing vulnerability in the authentication handler... High Unreviewed
CVE-2026-63770 was published Jul 20, 2026
Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows... Critical Unreviewed
CVE-2026-58122 was published Jul 10, 2026
In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over... Moderate Unreviewed
CVE-2026-59999 was published Jul 8, 2026
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0... Low Unreviewed
CVE-2026-46466 was published Jul 3, 2026
LibreTranslate through 1.9.7, fixed in commit 397fd22, contains an IP spoofing vulnerability in... Moderate Unreviewed
CVE-2026-57942 was published Jun 29, 2026
An issue was discovered in Canonical ADSys upstream versions through v0.16.2. During Active... Critical Unreviewed
CVE-2026-12249 was published Jun 22, 2026
Use of Less Trusted Source vulnerability in Apache APISIX. Attacker can take advantage of wolf... Low Unreviewed
CVE-2026-44046 was published Jun 19, 2026
OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication... Moderate Unreviewed
CVE-2020-37248 was published Jun 8, 2026
HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows... High Unreviewed
CVE-2026-43634 was published May 19, 2026
In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted... Moderate Unreviewed
CVE-2026-40226 was published Apr 10, 2026
Shynet before 0.14.0 allows Host header injection in the password reset flow. Moderate Unreviewed
CVE-2026-35507 was published Apr 3, 2026
Szafir SDK Web is a browser plug-in that can run SzafirHost application which download the... Moderate Unreviewed
CVE-2026-26927 was published Apr 2, 2026
Raytha CMS allows an attacker to spoof `X-Forwarded-Host` or `Host` headers to attacker... High Unreviewed
CVE-2025-69240 was published Mar 16, 2026
wpDiscuz before 7.6.47 contains an IP spoofing vulnerability in the getIP() function that allows... Moderate Unreviewed
CVE-2026-22201 was published Mar 13, 2026
In Bun before 1.3.5, the default trusted dependencies list (aka trust allow list) can be spoofed... Moderate Unreviewed
CVE-2026-24910 was published Jan 28, 2026
The AA Block Country plugin for WordPress is vulnerable to IP Address Spoofing in versions up to,... Moderate Unreviewed
CVE-2025-13694 was published Jan 7, 2026
A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the... Moderate Unreviewed
CVE-2025-15154 was published Dec 28, 2025
In the KDE Connect information-exchange protocol before 2025-04-18, a packet can be crafted to... Moderate Unreviewed
CVE-2025-32900 was published Dec 5, 2025
RICOH Streamline NX versions 3.5.1 to 24R3 are vulnerable to tampering with operation history. If... Low Unreviewed
CVE-2025-58422 was published Sep 8, 2025
Movable Type contains an issue with use of less trusted source. If exploited, tampered email to... Moderate Unreviewed
CVE-2025-53522 was published Aug 20, 2025
RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less... Low Unreviewed
CVE-2025-48825 was published Jun 13, 2025
The optional feature 'Anti-Virus & Sandbox' of i-FILTER contains an issue with improper pattern... Moderate Unreviewed
CVE-2025-47149 was published May 23, 2025
Bypass Connection Restriction vulnerability in Hitachi Infrastructure Analytics Advisor (Data... Moderate Unreviewed
CVE-2025-1245 was published May 16, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database