Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,538
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,516
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

20 advisories

Loading
Mattermost versions 10.11.x <= 10.11.20, 11.7.x <= 11.7.5 Mattermost fails to remove thread... Low Unreviewed
CVE-2026-9693 was published Aug 18, 2026
A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function... Low Unreviewed
CVE-2026-19019 was published Aug 6, 2026
Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and... Low Unreviewed
CVE-2026-63545 was published Aug 3, 2026
Better Auth: Stale sessions persist after user deletion across admin, anonymous, and SCIM flows Low
GHSA-2vg6-77g8-24mp was published for @better-auth/scim (npm) Jul 7, 2026
iruizsalinas Credited to iruizsalinas
mknod: Device nodes created mislabeled on SELinux, with broken cleanup (remove_dir on a node) Low
CVE-2026-35361 was published for uu_mknod (Rust) Jul 6, 2026
In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on... Low Unreviewed
CVE-2026-28196 was published Feb 25, 2026
Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade... Low Unreviewed
CVE-2024-21977 was published Sep 5, 2025
An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before &... Low Unreviewed
CVE-2023-29184 was published Jun 10, 2025
Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker... Low Unreviewed
CVE-2023-20518 was published Aug 13, 2024
Incomplete cleanup when performing redactions in Conduit, allowing an attacker to check whether... Low Unreviewed
CVE-2024-6300 was published Jun 25, 2024
A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865,... Low Unreviewed
CVE-2024-1048 was published Feb 6, 2024
Incomplete cleanup for some Intel Unison software may allow an authenticated user to potentially... Low Unreviewed
CVE-2022-43477 was published Nov 14, 2023
Incomplete cleanup for some Intel Unison software may allow a privileged user to potentially... Low Unreviewed
CVE-2022-46298 was published Nov 14, 2023
Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and... Low Unreviewed
CVE-2023-2400 was published Jun 20, 2023
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6... Low Unreviewed
CVE-2022-28764 was published Nov 15, 2022
A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0... Low Unreviewed
CVE-2022-2307 was published Aug 6, 2022
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may... Low Unreviewed
CVE-2020-0543 was published May 24, 2022
Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is... Low Unreviewed
CVE-2005-2293 was published May 1, 2022
An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows... Low Unreviewed
CVE-2002-0788 was published Apr 30, 2022
ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not... Low Unreviewed
CVE-2000-0552 was published Apr 30, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database