GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,750
Erlang
35
GitHub Actions
29
Go
2,323
Maven
5,000+
npm
3,956
NuGet
712
pip
3,739
Pub
12
RubyGems
921
Rust
973
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
515 advisories
Filter by severity
Sametime is impacted by sensitive information passed in URL.
Low
Unreviewed
CVE-2023-45716
was published
Feb 10, 2024
ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of...
Moderate
Unreviewed
CVE-2024-50624
was published
Oct 28, 2024
Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext,...
Moderate
Unreviewed
CVE-2025-44612
was published
May 30, 2025
An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed...
Moderate
Unreviewed
CVE-2021-42111
was published
May 24, 2022
This issue was addressed by using HTTPS when sending information over the network. This issue is...
Moderate
Unreviewed
CVE-2022-32857
was published
Aug 25, 2022
In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled. This...
High
Unreviewed
CVE-2025-5270
was published
May 27, 2025
Medtronic MMT 508 MiniMed insulin pump, 522 / MMT - 722 Paradigm REAL-TIME, 523 / MMT - 723...
Moderate
Unreviewed
CVE-2018-10634
was published
May 13, 2022
Using the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks PAN-OS® firewalls (PA...
Moderate
Unreviewed
CVE-2025-0136
was published
May 14, 2025
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with...
Moderate
Unreviewed
CVE-2025-40583
was published
May 13, 2025
The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could...
Critical
Unreviewed
CVE-2025-27720
was published
May 9, 2025
On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec...
Critical
Unreviewed
CVE-2024-12378
was published
May 8, 2025
Issue in my product in blah version x on y allows bad person to break
Critical
Unreviewed
CVE-2025-4475
was published
May 8, 2025
Free5gc v3.2.1 is vulnerable to Information disclosure.
Low
Unreviewed
CVE-2022-38870
was published
Oct 25, 2022
Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows...
Critical
Unreviewed
CVE-2025-47419
was published
May 6, 2025
Sensitive information accessible by physical probing of JTAG interface for some Intel(R)...
Low
Unreviewed
CVE-2022-0005
was published
May 13, 2022
An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. By default, a...
Moderate
Unreviewed
CVE-2025-32884
was published
May 2, 2025
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. A command...
High
Unreviewed
CVE-2025-32887
was published
May 2, 2025
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. By default, the...
Moderate
Unreviewed
CVE-2025-32881
was published
May 2, 2025
Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3...
Moderate
Unreviewed
CVE-2024-25650
was published
Mar 14, 2024
PC Keyboard WiFi & Bluetooth allows an attacker (in a man-in-the-middle position between the...
Moderate
Unreviewed
CVE-2022-45480
was published
Dec 2, 2022
Lazy Mouse allows an attacker (in a man in the middle position between the server and a connected...
Moderate
Unreviewed
CVE-2022-45483
was published
Dec 2, 2022
IBM InfoSphere Information Server 11.7 DataStage Flow Designer
transmits sensitive information...
Low
Unreviewed
CVE-2025-25046
was published
Apr 24, 2025
Telepad allows an attacker (in a man-in-the-middle position between the server and a connected...
Moderate
Unreviewed
CVE-2022-45478
was published
Dec 5, 2022
In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication...
Moderate
Unreviewed
CVE-2025-43013
was published
Apr 17, 2025
This vulnerability exists in the Meon KYC solutions due to transmission of sensitive data in...
High
Unreviewed
CVE-2025-42603
was published
Apr 23, 2025
ProTip!
Advisories are also available from the
GraphQL API