GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,693
Erlang
34
GitHub Actions
28
Go
2,283
Maven
5,000+
npm
3,934
NuGet
708
pip
3,702
Pub
12
RubyGems
919
Rust
959
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
118 advisories
Filter by severity
A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series...
Moderate
Unreviewed
CVE-2025-20181
was published
May 7, 2025
CarlinKit CPC200-CCPA Improper Verification of Cryptographic Signature Code Execution...
Moderate
Unreviewed
CVE-2025-2763
was published
Apr 23, 2025
NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures...
Moderate
Unreviewed
CVE-2025-43903
was published
Apr 18, 2025
A vulnerability in the web-based management interface of Cisco Secure Network Analytics could...
Moderate
Unreviewed
CVE-2025-20178
was published
Apr 16, 2025
The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter...
Moderate
Unreviewed
CVE-2025-31335
was published
Mar 28, 2025
A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local...
Moderate
Unreviewed
CVE-2025-20143
was published
Mar 12, 2025
An improper verification of cryptographic signature vulnerability was identified in GitHub...
Moderate
Unreviewed
CVE-2025-23369
was published
Jan 21, 2025
Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned...
Moderate
Unreviewed
CVE-2024-7344
was published
Jan 14, 2025
The application failed to account for exceptions thrown by the `loadManifestFromFile` method...
Moderate
Unreviewed
CVE-2024-11696
was published
Nov 26, 2024
A vulnerability in the Image Signature Verification feature of Cisco SD-WAN Software could...
Moderate
Unreviewed
CVE-2021-1461
was published
Nov 18, 2024
In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing...
Moderate
Unreviewed
CVE-2024-49394
was published
Nov 12, 2024
ABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE...
Moderate
Unreviewed
CVE-2024-8036
was published
Oct 25, 2024
Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability. This vulnerability...
Moderate
Unreviewed
CVE-2024-23960
was published
Sep 28, 2024
An Improper Validation of signature in Zscaler Client Connector on Windows allows an...
Moderate
Unreviewed
CVE-2023-28806
was published
Aug 6, 2024
The Zscaler Updater process does not validate the digital signature of the installer before...
Moderate
Unreviewed
CVE-2024-23460
was published
Aug 6, 2024
An issue was discovered in filestash v0.4. The usage of the ssh.InsecureIgnoreHostKey() disables...
Moderate
Unreviewed
CVE-2024-41258
was published
Jul 31, 2024
An issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey()...
Moderate
Unreviewed
CVE-2024-41254
was published
Jul 31, 2024
An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to...
Moderate
Unreviewed
CVE-2024-5912
was published
Jul 10, 2024
Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local...
Moderate
Unreviewed
CVE-2024-20892
was published
Jul 2, 2024
StorageGRID (formerly StorageGRID Webscale) versions prior to
11.7.0.9 and 11.8.0.5 are...
Moderate
Unreviewed
CVE-2024-21988
was published
Jun 15, 2024
Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for...
Moderate
Unreviewed
CVE-2024-27244
was published
May 15, 2024
Improper privilege management in the installer for Zoom Desktop Client for Windows before version...
Moderate
Unreviewed
CVE-2024-24694
was published
Apr 9, 2024
Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5...
Moderate
Unreviewed
CVE-2024-27247
was published
Apr 9, 2024
A flaw was found in osbuild-composer. A condition can be triggered that disables GPG verification...
Moderate
Unreviewed
CVE-2024-2307
was published
Mar 19, 2024
A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate...
Moderate
Unreviewed
CVE-2024-0567
was published
Jan 16, 2024
ProTip!
Advisories are also available from the
GraphQL API