Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
38
Go
2,794
Maven
5,000+
npm
4,402
NuGet
772
pip
4,179
Pub
12
RubyGems
965
Rust
1,075
Swift
45
Unreviewed advisories
All unreviewed
5,000+

1,475 advisories

Loading
WHILL Model C2 Electric Wheelchairs and Model F Power Chairs do not enforce authentication for... Critical Unreviewed
CVE-2025-14346 was published Jan 5, 2026
Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon... Critical Unreviewed
CVE-2025-15026 was published Jan 5, 2026
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authorization bypass... Moderate Unreviewed
CVE-2025-3646 was published Jan 4, 2026
Bagisto Missing Authentication on Installer API Endpoints High
CVE-2026-21446 was published for bagisto/bagisto (Composer) Jan 2, 2026
mhzcyber
Credited to mhzcyber
Langflow Missing Authentication on Critical API Endpoints High
CVE-2026-21445 was published for langflow (pip) Jan 2, 2026
kj84park juh0ng
Credited to kj84park and juh0ng
Selea CarPlateServer 4.0.1.6 contains a remote program execution vulnerability that allows... Critical Unreviewed
CVE-2020-36904 was published Dec 31, 2025
Akuvox Smart Intercom S539 contains an unauthenticated vulnerability that allows remote attackers... High Unreviewed
CVE-2024-58336 was published Dec 31, 2025
SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated vulnerability... Moderate Unreviewed
CVE-2022-50790 was published Dec 31, 2025
Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product... High Unreviewed
CVE-2025-66377 was published Dec 25, 2025
A remote unauthenticated attacker may be able to bypass authentication by utilizing a specific... High Unreviewed
CVE-2025-3232 was published Dec 24, 2025
Rifatron 5brid DVR contains an unauthenticated vulnerability in the animate.cgi script that... High Unreviewed
CVE-2019-25240 was published Dec 24, 2025
iSeeQ Hybrid DVR WH-H4 1.03R contains an unauthenticated vulnerability in the get_jpeg script... High Unreviewed
CVE-2019-25236 was published Dec 24, 2025
Beward N100 M2.1.6.04C014 contains an unauthenticated vulnerability that allows remote attackers... High Unreviewed
CVE-2019-25248 was published Dec 24, 2025
Synaccess netBooter NP-02x/NP-08x 6.8 contains an authentication bypass vulnerability in the... Critical Unreviewed
CVE-2018-25134 was published Dec 24, 2025
FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability in the ExportConfig... High Unreviewed
CVE-2018-25137 was published Dec 24, 2025
FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote... High Unreviewed
CVE-2018-25139 was published Dec 24, 2025
FLIR thermal traffic cameras contain an unauthenticated device manipulation vulnerability in... Critical Unreviewed
CVE-2018-25140 was published Dec 24, 2025
FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability that allows remote... High Unreviewed
CVE-2018-25136 was published Dec 24, 2025
FLIR thermal traffic cameras contain an unauthenticated vulnerability that allows remote... High Unreviewed
CVE-2018-25141 was published Dec 24, 2025
Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center... High Unreviewed
CVE-2025-66445 was published Dec 24, 2025
Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8... Critical Unreviewed
CVE-2025-65856 was published Dec 23, 2025
Screen SFT DAB 600/C Firmware 1.9.3 contains a weak session management vulnerability that allows... High Unreviewed
CVE-2023-53970 was published Dec 23, 2025
Screen SFT DAB 600/C firmware 1.9.3 contains an authentication bypass vulnerability that allows... Critical Unreviewed
CVE-2023-53967 was published Dec 23, 2025
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin... High Unreviewed
CVE-2023-53964 was published Dec 23, 2025
Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allows... Critical Unreviewed
CVE-2023-53969 was published Dec 23, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database