Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,428
Maven
5,000+
npm
5,000+
NuGet
1,088
pip
5,000+
Pub
13
RubyGems
1,129
Rust
1,506
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

204 advisories

Loading
In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's... Moderate Unreviewed
CVE-2026-14932 was published Jul 22, 2026
In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey... High Unreviewed
CVE-2026-13184 was published Jul 22, 2026
Kasa EC71 v4 and EC70 v4 firmware contains a static cryptographic private key stored in a read... High Unreviewed
CVE-2026-9770 was published Jul 15, 2026
Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT... Critical Unreviewed
CVE-2026-56271 was published Jul 12, 2026
Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same... Critical Unreviewed
CVE-2026-50091 was published Jun 12, 2026
Lansweeper lsrunase 2.0 and lsencrypt 2.0 use RC4 encryption with a hardcoded 142-byte static key... Moderate Unreviewed
CVE-2026-39031 was published Jun 26, 2026
Unauthenticated Backdoor in Enable CORS <= 2.0.3 versions. High Unreviewed
CVE-2026-54833 was published Jun 26, 2026
Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior encrypts requests... High Unreviewed
CVE-2026-9220 was published Jun 26, 2026
NetComm NF20MESH routers running firmware R6B031 and earlier contain an authentication bypass... Critical Unreviewed
CVE-2026-35019 was published Jun 23, 2026
A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance... High Unreviewed
CVE-2022-20773 was published Apr 22, 2022
Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier Moderate Unreviewed
CVE-2026-9260 was published Jun 16, 2026
The Wertheim SafeController Family 65000, Controller 65000 - AssemblyVersion 6.11.8130.22319,... High Unreviewed
CVE-2026-34022 was published Jun 15, 2026
The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a hard-coded... Moderate Unreviewed
CVE-2026-34029 was published Jun 15, 2026
Naxclow devices use a uniform request-signing scheme based on a hard-coded, platform-wide salt... Critical Unreviewed
CVE-2026-28742 was published Jun 12, 2026
Fixed AES-128-CBC keys inside the AcerConnect OTA application let attackers forge authorization... Moderate Unreviewed
CVE-2026-50226 was published Jun 4, 2026
The linqi application contains hardcoded cryptographic keys. Additionally, the application uses a... High Unreviewed
CVE-2026-11347 was published Jun 5, 2026
The secret used for validating authentication tokens is hardcoded in device firmware for... Critical Unreviewed
CVE-2025-54807 was published Sep 18, 2025
This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA... High Unreviewed
CVE-2026-45433 was published Jun 4, 2026
Delta Electronics DIAView has multiple vulnerabilities. Critical Unreviewed
CVE-2025-62581 was published Jan 16, 2026
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all... High Unreviewed
CVE-2020-6990 was published May 24, 2022
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a... Moderate Unreviewed
CVE-2019-10990 was published May 24, 2022
Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3... Critical Unreviewed
CVE-2017-7574 was published May 13, 2022
Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior... High Unreviewed
CVE-2026-5426 was published Apr 16, 2026
There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote... Critical Unreviewed
CVE-2026-9642 was published May 26, 2026
Use of Hard-coded Cryptographic Key vulnerability in Sifir Bes Education and Informatics Kunduz -... Critical Unreviewed
CVE-2023-3632 was published Aug 9, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database