GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,750
Erlang
35
GitHub Actions
29
Go
2,323
Maven
5,000+
npm
3,956
NuGet
712
pip
3,739
Pub
12
RubyGems
921
Rust
973
Swift
38
Unreviewed advisories
All unreviewed
5,000+
413 advisories
Filter by severity
An improper certificate validation vulnerability has been reported to affect File Station 5. If a...
High
Unreviewed
CVE-2025-30279
was published
Jun 6, 2025
An improper certificate validation vulnerability has been reported to affect File Station 5. If...
High
Unreviewed
CVE-2025-29885
was published
Jun 6, 2025
An improper certificate validation vulnerability has been reported to affect File Station 5. If...
High
Unreviewed
CVE-2025-29883
was published
Jun 6, 2025
An improper certificate validation vulnerability has been reported to affect File Station 5. If a...
High
Unreviewed
CVE-2025-33031
was published
Jun 6, 2025
An improper certificate validation vulnerability has been reported to affect File Station 5. If...
High
Unreviewed
CVE-2025-22486
was published
Jun 6, 2025
An improper certificate validation vulnerability has been reported to affect File Station 5. If...
High
Unreviewed
CVE-2025-29884
was published
Jun 6, 2025
Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin
High
CVE-2025-5279
was published
for
redshift-connector
(pip)
May 28, 2025
SSL Verification Bypass vulnerabilities exist in ASPECT if administrator credentials become...
High
Unreviewed
CVE-2024-13956
was published
May 22, 2025
Apache HttpClient disables domain checks
High
CVE-2025-27820
was published
for
org.apache.httpcomponents.client5:httpclient5
(Maven)
Apr 24, 2025
Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks
High
CVE-2023-32198
was published
for
github.com/rancher/steve
(Go)
Apr 25, 2025
A security vulnerability has been identified in all supported versions of OpenSSL related to the...
High
Unreviewed
CVE-2023-0464
was published
Mar 22, 2023
In UWB Google, there is a possible way for a malicious app to masquerade as system app com...
High
Unreviewed
CVE-2023-21358
was published
Oct 30, 2023
BYD QIN PLUS DM-i Dilink OS v3.0_13.1.7.2204050.1 to v3.0_13.1.7.2312290.1_0 was discovered to...
High
Unreviewed
CVE-2025-28169
was published
Apr 23, 2025
Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by...
High
Unreviewed
CVE-2017-3194
was published
May 13, 2022
Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and...
High
Unreviewed
CVE-2017-3190
was published
May 13, 2022
libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no"...
High
Unreviewed
CVE-2017-1000256
was published
May 13, 2022
Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of...
High
Unreviewed
CVE-2017-13083
was published
May 13, 2022
On Darwin, user's trust preferences for root certificates were not honored. If the user had a...
High
Unreviewed
CVE-2017-1000097
was published
May 14, 2022
iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability.
High
Unreviewed
CVE-2017-7726
was published
May 13, 2022
Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior...
High
Unreviewed
CVE-2017-3218
was published
May 13, 2022
Acceptance of invalid/self-signed TLS certificates in "Foxit PDF - PDF reader, editor, form,...
High
Unreviewed
CVE-2017-8059
was published
May 17, 2022
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...
High
Unreviewed
CVE-2017-3563
was published
May 13, 2022
Akerun - Smart Lock Robot App for iOS before 1.2.4 does not verify SSL certificates.
High
Unreviewed
CVE-2016-1148
was published
May 13, 2022
An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code...
High
Unreviewed
CVE-2017-2784
was published
May 13, 2022
When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should...
High
Unreviewed
CVE-2022-34469
was published
Dec 22, 2022
ProTip!
Advisories are also available from the
GraphQL API