Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

28 advisories

Loading
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not... High Unreviewed
CVE-2026-85959 was published Oct 12, 2026
Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were... Moderate Unreviewed
CVE-2026-105243 was published Oct 6, 2026
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated... Moderate Unreviewed
CVE-2026-18161 was published Sep 23, 2026
Affected versions of MISP use Redis to throttle repeated authentication-failure log entries. The... Moderate Unreviewed
CVE-2026-92002 was published Sep 15, 2026
CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child... Moderate Unreviewed
CVE-2026-29812 was published Sep 13, 2026
Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature... Moderate Unreviewed
CVE-2026-66816 was published Sep 8, 2026
@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events,... High Unreviewed
CVE-2026-82863 was published Aug 31, 2026
Print Assumptions does not report that a definition was produced while universe checking was... Moderate Unreviewed
CVE-2020-37268 was published Aug 24, 2026
HCL IntelliOps Event Management (IEM) is affected by insufficient logging. Insufficient logging... Moderate Unreviewed
CVE-2025-62307 was published Aug 20, 2026
phpMyFAQ versions 3.1.0 through 4.1.6 contain an authentication bypass vulnerability in AuthLdap:... High Unreviewed
CVE-2026-76208 was published Aug 19, 2026
VMware ESX contains an insufficient logging vulnerability. A malicious administrator could... Low Unreviewed
CVE-2026-41709 was published Jul 30, 2026
Insufficient logging in the entry export feature in Devolutions Server allows an authenticated... Low Unreviewed
CVE-2026-9247 was published May 26, 2026
@hulumi/baseline: CloudTrail selector tampering events were not fully detected Moderate
GHSA-gfp8-mp24-5vxg was published for @hulumi/baseline (npm) May 21, 2026
Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through... Low Unreviewed
CVE-2026-32803 was published May 8, 2026
HCL AION is affected by a vulnerability where certain user actions are not adequately audited or... Moderate Unreviewed
CVE-2025-52644 was published Mar 16, 2026
In MariaDB server version through 11.8.5, when server audit plugin is enabled with... Moderate Unreviewed
CVE-2026-3494 was published Mar 3, 2026
Harden-Runner: Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier) Moderate
CVE-2026-25598 was published for step-security/harden-runner (GitHub Actions) Feb 9, 2026
devanshbatham Credited to devanshbatham
Dell PowerScale OneFS, versions prior 9.13.0.0, contains an insufficient logging vulnerability.... Moderate Unreviewed
CVE-2026-22279 was published Jan 22, 2026
: Insufficient Logging vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension... Moderate Unreviewed
CVE-2025-53498 was published Jul 7, 2025
Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows... Moderate Unreviewed
CVE-2025-2562 was published Mar 26, 2025
: Insufficient Logging vulnerability in OpenText Secure Content Manager on Windows allows Audit... Moderate Unreviewed
CVE-2024-10863 was published Nov 22, 2024
The ventilator and the Service PC lack sufficient audit logging capabilities to allow for... Critical Unreviewed
CVE-2024-48967 was published Nov 15, 2024
In Progress MOVEit Transfer versions released before 2022.0.11 (14.0.11), 2022.1.12 (14.1.12),... Moderate Unreviewed
CVE-2024-2291 was published Mar 20, 2024
Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability. A... Low Unreviewed
CVE-2024-24901 was published Mar 4, 2024
An Information Disclosure vulnerability exists in Opay Mobile application 1.5.1.26 and maybe be... High Unreviewed
CVE-2021-43419 was published Nov 7, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database