GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,717
Maven
5,000+
npm
4,328
NuGet
761
pip
4,105
Pub
12
RubyGems
958
Rust
1,065
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
418 advisories
Filter by severity
With TLS 1.3 pre-shared key (PSK) a malicious or faulty server could ignore the request for PFS ...
Moderate
Unreviewed
CVE-2025-11935
was published
Nov 22, 2025
Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E...
Moderate
Unreviewed
CVE-2025-41743
was published
Dec 2, 2025
An issue was discovered in Kaseya Rapid Fire Tools Network Detective through 2.0.16.0. A...
High
Unreviewed
CVE-2025-32874
was published
Jul 16, 2025
Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0...
Moderate
Unreviewed
CVE-2025-12439
was published
Nov 10, 2025
Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19...
Critical
Unreviewed
CVE-2025-12478
was published
Oct 29, 2025
A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been declared as...
Low
Unreviewed
CVE-2025-2349
was published
Mar 17, 2025
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,...
Moderate
Unreviewed
CVE-2020-25685
was published
May 24, 2022
NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to...
Moderate
Unreviewed
CVE-2020-10125
was published
May 24, 2022
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys...
Moderate
Unreviewed
CVE-2023-4333
was published
Aug 15, 2023
A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow...
Moderate
Unreviewed
CVE-2020-10377
was published
May 24, 2022
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak...
Low
Unreviewed
CVE-2014-2381
was published
May 17, 2022
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak...
High
Unreviewed
CVE-2014-2380
was published
May 17, 2022
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2...
Critical
Unreviewed
CVE-2017-11317
was published
May 13, 2022
The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover...
Moderate
Unreviewed
CVE-2014-9199
was published
May 17, 2022
Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0...
High
Unreviewed
CVE-2025-46409
was published
Aug 28, 2025
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic...
High
Unreviewed
CVE-2019-4160
was published
May 24, 2022
ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective...
Critical
Unreviewed
CVE-2025-45765
was published
Aug 7, 2025
A vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions < V5.6.0), RUGGEDCOM ROS...
Moderate
Unreviewed
CVE-2021-37209
was published
Mar 9, 2022
jsrsasign v11.1.0 was discovered to contain weak encryption.
High
Unreviewed
CVE-2025-45764
was published
Aug 6, 2025
jwt v5.4.3 was discovered to contain weak encryption.
High
Unreviewed
CVE-2025-45770
was published
Jul 31, 2025
php-jwt v6.11.0 was discovered to contain weak encryption.
High
Unreviewed
CVE-2025-45769
was published
Jul 31, 2025
A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote...
Moderate
Unreviewed
CVE-2024-10026
was published
Jan 30, 2025
IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could allow malicious actors to view and...
Moderate
Unreviewed
CVE-2025-36106
was published
Jul 21, 2025
A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic. Affected...
Moderate
Unreviewed
CVE-2025-7789
was published
Jul 18, 2025
Brocade ASCG before 3.3.0 allows for the use of medium strength cryptography algorithms on...
High
Unreviewed
CVE-2025-7398
was published
Jul 18, 2025
ProTip!
Advisories are also available from the
GraphQL API