Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,183
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

1,539 advisories

Loading
Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate... Critical Unreviewed
CVE-2026-91881 was published Oct 14, 2026
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that... Moderate Unreviewed
CVE-2026-103294 was published Oct 14, 2026
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that... Moderate Unreviewed
CVE-2026-100116 was published Oct 14, 2026
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that... High Unreviewed
CVE-2026-100118 was published Oct 14, 2026
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that... High Unreviewed
CVE-2026-100123 was published Oct 14, 2026
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that... High Unreviewed
CVE-2026-100121 was published Oct 14, 2026
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that... High Unreviewed
CVE-2026-100122 was published Oct 14, 2026
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could... Moderate Unreviewed
CVE-2026-77816 was published Oct 13, 2026
Improper certificate validation in Windows Hello allows an authorized attacker to bypass a... Moderate Unreviewed
CVE-2026-83926 was published Oct 13, 2026
Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability High
CVE-2026-96222 was published for System.Security.Cryptography.Xml (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability Moderate
CVE-2026-70194 was published for Microsoft.NETCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated... High Unreviewed
CVE-2026-108184 was published Oct 13, 2026
Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an... High Unreviewed
CVE-2026-108185 was published Oct 13, 2026
A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9).... High Unreviewed
CVE-2026-78556 was published Oct 13, 2026
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a... High Unreviewed
CVE-2026-84418 was published Oct 13, 2026
NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426... Critical Unreviewed
CVE-2026-109423 was published Oct 12, 2026
FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in... High Unreviewed
CVE-2026-109245 was published Oct 12, 2026
SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto... Critical Unreviewed
CVE-2026-109399 was published Oct 12, 2026
Improper Certificate Validation vulnerability in hexpm hex_core allows an attacker who can... Moderate Unreviewed
CVE-2026-103502 was published Oct 12, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an... High Unreviewed
CVE-2026-78020 was published Oct 9, 2026
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to... Critical Unreviewed
CVE-2026-96207 was published Oct 9, 2026
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle... Moderate Unreviewed
CVE-2026-84032 was published Oct 9, 2026
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates... Critical Unreviewed
CVE-2026-95210 was published Oct 8, 2026
An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5... High Unreviewed
CVE-2026-95208 was published Oct 8, 2026
Improper certificate validation in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3... Moderate Unreviewed
CVE-2026-107587 was published Oct 8, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database