GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,324
Erlang
31
GitHub Actions
21
Go
2,084
Maven
5,000+
npm
3,747
NuGet
674
pip
3,436
Pub
12
RubyGems
892
Rust
881
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
296 advisories
Filter by severity
An issue in the native clients for Amazon WorkSpaces Clients when running PCoIP protocol may...
High
Unreviewed
CVE-2025-0501
was published
Jan 15, 2025
An issue in the native clients for Amazon WorkSpaces, Amazon AppStream 2.0, and Amazon DCV...
High
Unreviewed
CVE-2025-0500
was published
Jan 15, 2025
Improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow...
High
Unreviewed
CVE-2024-54848
was published
Jan 10, 2025
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized...
High
Unreviewed
CVE-2024-40702
was published
Jan 7, 2025
An improper validation vulnerability was reported in the firmware update mechanism of LADM and...
High
Unreviewed
CVE-2024-4762
was published
Dec 16, 2024
An improper certificate validation vulnerability was reported in LADM that could allow a network...
High
Unreviewed
CVE-2024-6001
was published
Dec 16, 2024
An improper certificate validation vulnerability has been reported to affect several QNAP...
High
Unreviewed
CVE-2024-48865
was published
Dec 6, 2024
An Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point ...
High
Unreviewed
CVE-2024-45205
was published
Dec 4, 2024
An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app...
High
Unreviewed
CVE-2024-5921
was published
Nov 27, 2024
NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2023-51634
was published
Nov 22, 2024
A vulnerability in the certificate validation of Cisco Expressway-C and Cisco ...
High
Unreviewed
CVE-2022-20814
was published
Nov 15, 2024
qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors.
High
Unreviewed
CVE-2024-51774
was published
Nov 2, 2024
A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality...
High
Unreviewed
CVE-2023-49570
was published
Oct 18, 2024
A vulnerability has been identified in Bitdefender Safepay's handling of HTTPS connections. The...
High
Unreviewed
CVE-2023-6058
was published
Oct 18, 2024
A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality...
High
Unreviewed
CVE-2023-6057
was published
Oct 18, 2024
A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality...
High
Unreviewed
CVE-2023-6056
was published
Oct 18, 2024
A vulnerability has been identified in the Bitdefender Total Security HTTPS scanning...
High
Unreviewed
CVE-2023-49567
was published
Oct 18, 2024
A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality...
High
Unreviewed
CVE-2023-6055
was published
Oct 18, 2024
Windows Secure Channel Spoofing Vulnerability
High
Unreviewed
CVE-2024-43550
was published
Oct 8, 2024
SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS...
High
Unreviewed
CVE-2024-7206
was published
Oct 8, 2024
The Planet Fitness Workouts iOS and Android mobile apps prior to version 9.8.12 (released on 2024...
High
Unreviewed
CVE-2024-43201
was published
Sep 23, 2024
Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS...
High
Unreviewed
CVE-2024-8287
was published
Sep 18, 2024
An improper certificate validation vulnerability in TLS certificate validation allows an attacker...
High
Unreviewed
CVE-2024-40714
was published
Sep 7, 2024
Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an...
High
Unreviewed
CVE-2024-41996
was published
Aug 26, 2024
A flaw was found in the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an...
High
Unreviewed
CVE-2024-8007
was published
Aug 21, 2024
ProTip!
Advisories are also available from the
GraphQL API