Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

287 advisories

Loading
A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the... Moderate Unreviewed
CVE-2026-115973 was published Oct 24, 2026
A vulnerability in the password reset mechanism could allow an attacker to bypass the... Critical Unreviewed
CVE-2026-43845 was published Oct 20, 2026
A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects... Low Unreviewed
CVE-2026-112035 was published Oct 19, 2026
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric... High Unreviewed
CVE-2026-16437 was published Oct 15, 2026
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric... Critical Unreviewed
CVE-2026-16436 was published Oct 15, 2026
When the password reset functionality is enabled, and email is configured, an attacker could take... Critical Unreviewed
CVE-2026-108335 was published Oct 15, 2026
An administrator could retrieve the password reset code for any user and take over the account. ... High Unreviewed
CVE-2026-108337 was published Oct 15, 2026
Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability... Critical Unreviewed
CVE-2026-63159 was published Oct 13, 2026
Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability High
CVE-2026-70175 was published for Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the... Moderate Unreviewed
CVE-2026-109204 was published Oct 12, 2026
Traccar through 6.16.0 contains a weak password recovery vulnerability that allows attackers to... High Unreviewed
CVE-2026-108737 was published Oct 11, 2026
Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json... Critical Unreviewed
CVE-2026-107640 was published Oct 8, 2026
Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer... Critical Unreviewed
CVE-2026-19218 was published Oct 8, 2026
A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue... Moderate Unreviewed
CVE-2026-101188 was published Sep 29, 2026
Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 build administrator password... High Unreviewed
CVE-2026-100870 was published Sep 27, 2026
Gladys Assistant before 5.1.0 contains a password reset link poisoning vulnerability that allows... High Unreviewed
CVE-2026-93340 was published Sep 22, 2026
SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as... High Unreviewed
CVE-2026-93453 was published Sep 18, 2026
The password reset funcionality is vulnerable to unauthorized account modification due to... High Unreviewed
CVE-2026-14850 was published Sep 17, 2026
A vulnerability was determined in jaychouchannel Tourism-Management-System up to... Moderate Unreviewed
CVE-2026-90522 was published Sep 13, 2026
Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes (email/registration... Moderate Unreviewed
CVE-2026-81905 was published Sep 11, 2026
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Ankaref Innovation and... High Unreviewed
CVE-2026-6285 was published Sep 10, 2026
Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local... Critical Unreviewed
CVE-2026-84699 was published Sep 2, 2026
Kimai before 2.58.0 contains an authentication bypass vulnerability where password reset links... High Unreviewed
CVE-2026-80196 was published Aug 31, 2026
A vulnerability was determined in Beetel 450TC3 01.00.00_01. This affects an unknown part.... Low Unreviewed
CVE-2026-82487 was published Aug 30, 2026
Pimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypass High
CVE-2026-55207 was published for pimcore/studio-backend-bundle (Composer) Aug 28, 2026
byteoverride Credited to byteoverride
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database