GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,717
Maven
5,000+
npm
4,328
NuGet
761
pip
4,105
Pub
12
RubyGems
958
Rust
1,065
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
79 advisories
Filter by severity
Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate...
Critical
Unreviewed
CVE-2025-56231
was published
Nov 5, 2025
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and...
Critical
Unreviewed
CVE-2025-34235
was published
Sep 29, 2025
Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.1049 and...
Critical
Unreviewed
CVE-2025-34199
was published
Sep 19, 2025
MicroWorld eScan AV's update mechanism failed to ensure authenticity and integrity of updates:...
Critical
Unreviewed
CVE-2024-13990
was published
Sep 19, 2025
An authentication bypass vulnerability exists in the out-of-support Control-M/Agent versions 9.0...
Critical
Unreviewed
CVE-2025-55109
was published
Sep 16, 2025
A malicious client can bypass the client certificate trust check of an opc.https server when the...
Critical
Unreviewed
CVE-2025-7390
was published
Aug 21, 2025
A certificate verification error in wolfSSL when building with the WOLFSSL_SYS_CA_CERTS and...
Critical
Unreviewed
CVE-2025-7395
was published
Jul 19, 2025
If a user visited a webpage with an invalid TLS certificate, and granted an exception, the...
Critical
Unreviewed
CVE-2025-6433
was published
Jun 26, 2025
An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute...
Critical
Unreviewed
CVE-2025-29331
was published
Jun 26, 2025
An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to...
Critical
Unreviewed
CVE-2025-32878
was published
Jun 20, 2025
"This issue is limited to motherboards and does not affect laptops, desktop computers, or other...
Critical
Unreviewed
CVE-2025-3463
was published
May 9, 2025
Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860...
Critical
Unreviewed
CVE-2024-41334
was published
Feb 27, 2025
A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute...
Critical
Unreviewed
CVE-2025-23114
was published
Feb 5, 2025
ECOVACS lawnmowers and vacuums do not properly validate TLS certificates. An unauthenticated...
Critical
Unreviewed
CVE-2024-52330
was published
Jan 23, 2025
ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. An...
Critical
Unreviewed
CVE-2024-52329
was published
Jan 23, 2025
An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device uses a custom UDP...
Critical
Unreviewed
CVE-2019-20461
was published
Nov 7, 2024
An issue was discovered in Mbed TLS 3.x before 3.6.1. With TLS 1.3, when a server enables...
Critical
Unreviewed
CVE-2024-45159
was published
Sep 5, 2024
There is a vulnerability in the AP Certificate Management Service which could allow a threat...
Critical
Unreviewed
CVE-2024-42395
was published
Aug 6, 2024
In gnss service, there is a possible escalation of privilege due to improper certificate...
Critical
Unreviewed
CVE-2024-20080
was published
Jul 1, 2024
A default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate under...
Critical
Unreviewed
CVE-2024-25140
was published
Feb 6, 2024
SSL connections to NOVELL and Synology LDAP server are vulnerable to a man-in-the-middle attack...
Critical
Unreviewed
CVE-2023-50356
was published
Jan 31, 2024
An issue in Turing Video Turing Edge+ EVC5FD v.1.38.6 allows remote attacker to execute arbitrary...
Critical
Unreviewed
CVE-2023-42425
was published
Oct 31, 2023
The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for...
Critical
Unreviewed
CVE-2023-5422
was published
Oct 16, 2023
Lack of TLS certificate verification in log transmission of a financial module within LINE Client...
Critical
Unreviewed
CVE-2023-5554
was published
Oct 12, 2023
In JetBrains Ktor before 2.3.5 server certificates were not verified
Critical
Unreviewed
CVE-2023-45613
was published
Oct 9, 2023
ProTip!
Advisories are also available from the
GraphQL API