Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
40
Go
2,954
Maven
5,000+
npm
4,606
NuGet
787
pip
4,305
Pub
12
RubyGems
984
Rust
1,121
Swift
49
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

758 advisories

Loading
Insertion of sensitive information into log file in Windows License Manager allows an authorized... Moderate Unreviewed
CVE-2025-62209 was published Nov 11, 2025
Insertion of sensitive information into log file in Windows License Manager allows an authorized... Moderate Unreviewed
CVE-2025-62208 was published Nov 11, 2025
Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR... Low Unreviewed
CVE-2025-12940 was published Nov 11, 2025
The CE21 Suite plugin for WordPress is vulnerable to Sensitive Information Exposure in all... Critical Unreviewed
CVE-2025-11008 was published Nov 4, 2025
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.1 and... Low Unreviewed
CVE-2025-43423 was published Nov 4, 2025
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.1 and... Moderate Unreviewed
CVE-2025-43426 was published Nov 4, 2025
A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances... Moderate Unreviewed
CVE-2025-40603 was published Oct 31, 2025
Sensitive data exposure via logging in basic-auth leads to plaintext usernames and passwords... High Unreviewed
CVE-2025-62232 was published Oct 31, 2025
When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled... Moderate Unreviewed
CVE-2025-58189 was published Oct 30, 2025
ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a... Low Unreviewed
CVE-2025-11248 was published Oct 27, 2025
The Quickcreator – AI Blog Writer plugin for WordPress is vulnerable to Sensitive Information... High Unreviewed
CVE-2025-11504 was published Oct 24, 2025
A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11... Moderate Unreviewed
CVE-2025-46752 was published Oct 16, 2025
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and... Moderate Unreviewed
CVE-2025-20329 was published Oct 15, 2025
The Content Writer plugin for WordPress is vulnerable to Sensitive Information Exposure in all... Moderate Unreviewed
CVE-2025-10486 was published Oct 15, 2025
Insertion of sensitive information into log file in Active Directory Federation Services allows... Moderate Unreviewed
CVE-2025-59258 was published Oct 14, 2025
Insertion of sensitive information into log file in Windows ETL Channel allows an authorized... Moderate Unreviewed
CVE-2025-59197 was published Oct 14, 2025
Insertion of sensitive information into log file in Windows StateRepository API allows an... Moderate Unreviewed
CVE-2025-59203 was published Oct 14, 2025
Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized... Moderate Unreviewed
CVE-2025-47979 was published Oct 14, 2025
An Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0... Low Unreviewed
CVE-2025-31514 was published Oct 14, 2025
The WP Reset plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions... Moderate Unreviewed
CVE-2025-10645 was published Oct 7, 2025
IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files... Low Unreviewed
CVE-2023-50301 was published Oct 1, 2025
IBM Lakehouse (watsonx.data 2.2) stores potentially sensitive information in log files that could... Low Unreviewed
CVE-2025-36144 was published Sep 27, 2025
The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to Sensitive Information... Moderate Unreviewed
CVE-2025-9985 was published Sep 26, 2025
Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 1.0.735 and... High Unreviewed
CVE-2025-34188 was published Sep 19, 2025
Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging... Critical Unreviewed
CVE-2025-34183 was published Sep 16, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database