GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
101
GitHub Actions
54
Go
4,282
Maven
5,000+
npm
5,000+
NuGet
1,029
pip
5,000+
Pub
13
RubyGems
1,105
Rust
1,490
Swift
61
Unreviewed advisories
All unreviewed
5,000+
239 advisories
Filter by severity
An authentication bypass vulnerability exists in
the default SFTP server component utilized...
Critical
Unreviewed
CVE-2026-5268
was published
Jul 6, 2026
Ocelot through 24.1.0, fixed in commit f156fd4, contains a security control bypass vulnerability...
Critical
Unreviewed
CVE-2026-58172
was published
Jun 30, 2026
WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contains an authentication bypass...
Critical
Unreviewed
CVE-2019-25763
was published
Jun 20, 2026
Unauthenticated Broken Authentication in wpForo Forum <= 3.1.0 versions.
Critical
Unreviewed
CVE-2026-49767
was published
Jun 17, 2026
Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.8.6 versions.
Critical
Unreviewed
CVE-2026-49764
was published
Jun 15, 2026
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and...
Critical
Unreviewed
CVE-2026-10523
was published
Jun 9, 2026
Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or...
Critical
Unreviewed
CVE-2025-41273
was published
May 29, 2026
Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can...
Critical
Unreviewed
CVE-2026-35087
was published
May 27, 2026
In Slican telephone exchanges it is possible to manage the control panel remotely. An...
Critical
Unreviewed
CVE-2026-35090
was published
May 27, 2026
Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C...
Critical
Unreviewed
CVE-2026-33843
was published
May 26, 2026
An undocumented configuration export port is accessible on some models
of ZKTeco CCTV cameras....
Critical
Unreviewed
CVE-2026-8598
was published
May 20, 2026
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an...
Critical
Unreviewed
CVE-2026-24207
was published
May 20, 2026
Authorization Bypass vulnerability in Creartia's ICMS software could allow an attacker to gain...
Critical
Unreviewed
CVE-2026-4320
was published
May 18, 2026
ELECOM wireless LAN access point devices do not require authentication to access some specific...
Critical
Unreviewed
CVE-2026-40621
was published
May 13, 2026
DevGuard has an unauthenticated identity assertion via `X-Admin-Token` header
Critical
CVE-2026-42300
was published
for
github.com/l3montree-dev/devguard
(Go)
May 5, 2026
The User Verification by PickPlugins plugin for WordPress is vulnerable to authentication bypass...
Critical
Unreviewed
CVE-2026-7458
was published
May 2, 2026
The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to...
Critical
Unreviewed
CVE-2026-7567
was published
May 1, 2026
A vulnerability in
SenseLive
X3050’s web management interface allows unauthorized access to...
Critical
Unreviewed
CVE-2026-40630
was published
Apr 24, 2026
The Visa Acceptance Solutions plugin for WordPress is vulnerable to Authentication Bypass in all...
Critical
Unreviewed
CVE-2026-3461
was published
Apr 22, 2026
Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150.
Critical
Unreviewed
CVE-2026-6768
was published
Apr 21, 2026
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150 and...
Critical
Unreviewed
CVE-2026-6771
was published
Apr 21, 2026
Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150.
Critical
Unreviewed
CVE-2026-6760
was published
Apr 21, 2026
megagao production_ssm v1.0 contains an authorization bypass vulnerability in the user addition...
Critical
Unreviewed
CVE-2026-31271
was published
Apr 7, 2026
In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during...
Critical
Unreviewed
CVE-2026-30079
was published
Apr 7, 2026
An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login...
Critical
Unreviewed
CVE-2026-31151
was published
Apr 6, 2026
ProTip!
Advisories are also available from the
GraphQL API