GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,412
Erlang
33
GitHub Actions
22
Go
2,148
Maven
5,000+
npm
3,814
NuGet
689
pip
3,487
Pub
12
RubyGems
901
Rust
900
Swift
38
Unreviewed advisories
All unreviewed
5,000+
470 advisories
Filter by severity
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 stores potentially...
Moderate
Unreviewed
CVE-2024-49816
was published
Dec 17, 2024
Disclosure of sensitive information in HikVision camera driver's log file in XProtect Device Pack...
Moderate
Unreviewed
CVE-2024-12569
was published
Dec 19, 2024
Windows Desired State Configuration (DSC) Information Disclosure Vulnerability.
Moderate
Unreviewed
CVE-2022-30148
was published
Jun 16, 2022
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an...
Moderate
Unreviewed
CVE-2024-40679
was published
Jan 8, 2025
Windows Kernel Memory Information Disclosure Vulnerability
Moderate
Unreviewed
CVE-2025-21317
was published
Jan 14, 2025
Windows Kernel Memory Information Disclosure Vulnerability
Moderate
Unreviewed
CVE-2025-21319
was published
Jan 14, 2025
Windows Kernel Memory Information Disclosure Vulnerability
Moderate
Unreviewed
CVE-2025-21323
was published
Jan 14, 2025
Windows Kernel Memory Information Disclosure Vulnerability
Moderate
Unreviewed
CVE-2025-21321
was published
Jan 14, 2025
Windows Kernel Memory Information Disclosure Vulnerability
Moderate
Unreviewed
CVE-2025-21316
was published
Jan 14, 2025
Windows Kernel Memory Information Disclosure Vulnerability
Moderate
Unreviewed
CVE-2025-21320
was published
Jan 14, 2025
Windows Kernel Memory Information Disclosure Vulnerability
Moderate
Unreviewed
CVE-2025-21318
was published
Jan 14, 2025
In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be...
Moderate
Unreviewed
CVE-2024-12226
was published
Jan 16, 2025
Under certain log settings the IAM or CORE service will log credentials in the iam logfile in...
Moderate
Unreviewed
CVE-2024-11923
was published
Jan 18, 2025
IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.24, 7.1 through 7.1.2.10, and 7.2 through 7.2.3.13...
Moderate
Unreviewed
CVE-2024-45091
was published
Jan 21, 2025
The Snowflake Connector for Python stores sensitive data in logs
Moderate
CVE-2024-49750
was published
for
snowflake-connector-python
(pip)
Oct 24, 2024
In JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs
Moderate
Unreviewed
CVE-2025-24457
was published
Jan 21, 2025
IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2...
Moderate
Unreviewed
CVE-2023-38271
was published
Jan 25, 2025
Certain errors of the upstream libraries will insert sensitive information in the OTRS or ((OTRS)...
Moderate
Unreviewed
CVE-2025-24389
was published
Jan 27, 2025
Infinispan vulnerable to Insertion of Sensitive Information into Log File
Moderate
CVE-2025-0736
was published
for
org.infinispan:infinispan-parent
(Maven)
Jan 28, 2025
Insertion of Sensitive Information into Log File vulnerability observed in FLEXON. Some...
Moderate
Unreviewed
CVE-2024-48852
was published
Jan 29, 2025
An information exposure through log file vulnerability exists in Brocade SANnav before Brocade...
Moderate
Unreviewed
CVE-2022-43933
was published
Feb 4, 2025
A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow a privileged user to...
Moderate
Unreviewed
CVE-2024-29955
was published
Apr 18, 2024
Brocade SANnav versions before 2.2.2 log Brocade Fabric OS switch passwords when debugging is...
Moderate
Unreviewed
CVE-2022-43936
was published
Feb 4, 2025
An information exposure through log file vulnerability exists in Brocade SANnav before Brocade...
Moderate
Unreviewed
CVE-2022-43935
was published
Feb 4, 2025
Possible information exposure through log file vulnerability where sensitive fields are recorded...
Moderate
Unreviewed
CVE-2022-43937
was published
Feb 4, 2025
ProTip!
Advisories are also available from the
GraphQL API