GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,750
Erlang
35
GitHub Actions
29
Go
2,323
Maven
5,000+
npm
3,956
NuGet
712
pip
3,739
Pub
12
RubyGems
921
Rust
973
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
515 advisories
Filter by severity
Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext,...
Moderate
Unreviewed
CVE-2025-44612
was published
May 30, 2025
In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled. This...
High
Unreviewed
CVE-2025-5270
was published
May 27, 2025
Using the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks PAN-OS® firewalls (PA...
Moderate
Unreviewed
CVE-2025-0136
was published
May 14, 2025
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with...
Moderate
Unreviewed
CVE-2025-40583
was published
May 13, 2025
The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could...
Critical
Unreviewed
CVE-2025-27720
was published
May 9, 2025
Issue in my product in blah version x on y allows bad person to break
Critical
Unreviewed
CVE-2025-4475
was published
May 8, 2025
On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec...
Critical
Unreviewed
CVE-2024-12378
was published
May 8, 2025
Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows...
Critical
Unreviewed
CVE-2025-47419
was published
May 6, 2025
An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. By default, a...
Moderate
Unreviewed
CVE-2025-32884
was published
May 2, 2025
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. A command...
High
Unreviewed
CVE-2025-32887
was published
May 2, 2025
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. By default, the...
Moderate
Unreviewed
CVE-2025-32881
was published
May 2, 2025
IBM InfoSphere Information Server 11.7 DataStage Flow Designer
transmits sensitive information...
Low
Unreviewed
CVE-2025-25046
was published
Apr 24, 2025
This vulnerability exists in the Meon KYC solutions due to transmission of sensitive data in...
High
Unreviewed
CVE-2025-42603
was published
Apr 23, 2025
In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication...
Moderate
Unreviewed
CVE-2025-43013
was published
Apr 17, 2025
Arctera/Veritas Data Insight before 7.1.2 can send cleartext credentials when configured to use...
Moderate
Unreviewed
CVE-2025-43704
was published
Apr 17, 2025
Cleartext transmission of sensitive information issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series...
Moderate
Unreviewed
CVE-2025-27722
was published
Apr 9, 2025
SAP Commerce Cloud (Public Cloud) does not allow to disable unencrypted HTTP (port 80) entirely,...
Moderate
Unreviewed
CVE-2025-26654
was published
Apr 8, 2025
A vulnerability classified as problematic has been found in Consumer Comanda Mobile up to 14.9.3...
Low
Unreviewed
CVE-2025-3329
was published
Apr 7, 2025
SaTECH BCU in its firmware version 2.1.3 uses the HTTP protocol. The use of the HTTP protocol for...
Moderate
Unreviewed
CVE-2025-2861
was published
Mar 28, 2025
A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is...
Moderate
Unreviewed
CVE-2024-45361
was published
Mar 27, 2025
Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently...
Critical
Unreviewed
CVE-2025-2311
was published
Mar 20, 2025
This issue was addressed by using HTTPS when sending information over the network. This issue is...
High
Unreviewed
CVE-2024-44276
was published
Mar 17, 2025
The device uses an unencrypted, proprietary protocol for communication. Through this protocol,...
High
Unreviewed
CVE-2025-27594
was published
Mar 14, 2025
Bitdefender Box, versions 1.3.11.490 through 1.3.11.505, uses the insecure HTTP protocol to...
Critical
Unreviewed
CVE-2024-13872
was published
Mar 12, 2025
Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software (FRS). Absence...
Moderate
Unreviewed
CVE-2025-22493
was published
Mar 5, 2025
ProTip!
Advisories are also available from the
GraphQL API