Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,323
Maven
5,000+
npm
5,000+
NuGet
1,031
pip
5,000+
Pub
13
RubyGems
1,122
Rust
1,494
Swift
61
Unreviewed advisories
All unreviewed
5,000+

14 advisories

Loading
stigmem-node's federation insecure transport settings may allow non-loopback cleartext federation Critical
GHSA-jmfc-hfjq-pxcp was published for stigmem-node (pip) May 29, 2026
Unfurl through 2025.08 contains an improper input validation vulnerability in config parsing that... Critical Unreviewed
CVE-2026-40035 was published Apr 9, 2026
Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure) Critical
GHSA-vg9h-jx4v-cwx2 was published for dfir-unfurl (pip) Jan 29, 2026
mobasi-team Credited to mobasi-team
The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to authentication bypass due to... Critical Unreviewed
CVE-2024-9643 was published Feb 4, 2025
Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be... Critical Unreviewed
CVE-2024-46873 was published Dec 23, 2024
Hard-coded credentials for the CyberPower PowerPanel test server can be found in the production... Critical Unreviewed
CVE-2024-32047 was published May 15, 2024
Active Debug Code in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3,... Critical Unreviewed
CVE-2024-28008 was published Mar 28, 2024
An unauthorized user could access debug features in Quantum HD Unity products that were... Critical Unreviewed
CVE-2023-4804 was published Nov 11, 2023
A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of... Critical Unreviewed
CVE-2023-34346 was published Oct 11, 2023
A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan... Critical Unreviewed
CVE-2023-32645 was published Oct 11, 2023
A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user... Critical Unreviewed
CVE-2023-0954 was published Jun 8, 2023
SQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email... Critical Unreviewed
CVE-2022-45677 was published Feb 21, 2023
Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is... Critical Unreviewed
CVE-2023-22357 was published Jan 17, 2023
An OS command injection vulnerability exists in the console_main_loop :sys functionality of Abode... Critical Unreviewed
CVE-2022-29520 was published Oct 25, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database