GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
40
Go
2,954
Maven
5,000+
npm
4,606
NuGet
787
pip
4,305
Pub
12
RubyGems
984
Rust
1,121
Swift
49
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
758 advisories
Filter by severity
In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs
Moderate
Unreviewed
CVE-2026-25846
was published
Feb 9, 2026
Tanium addressed an information disclosure vulnerability in Threat Response.
Moderate
Unreviewed
CVE-2025-15332
was published
Feb 5, 2026
In Secure Access 12.70 and prior to 14.20, the logging
subsystem may write an unredacted...
Moderate
Unreviewed
CVE-2026-0519
was published
Jan 17, 2026
Brocade ASCG before 3.3.0 logs JSON
Web Tokens (JWT) in log files. An attacker with access to...
High
Unreviewed
CVE-2025-6391
was published
Jul 18, 2025
Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to...
Low
Unreviewed
CVE-2025-13743
was published
Dec 9, 2025
An Insertion of Sensitive Information into Log File vulnerability in B&R PVI client versions...
Moderate
Unreviewed
CVE-2026-0936
was published
Jan 29, 2026
When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled...
Moderate
Unreviewed
CVE-2025-58189
was published
Oct 30, 2025
IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read...
Moderate
Unreviewed
CVE-2025-13925
was published
Jan 20, 2026
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26...
Moderate
Unreviewed
CVE-2025-43508
was published
Jan 16, 2026
Insertion of sensitive information into log file in Windows Kernel allows an unauthorized...
Moderate
Unreviewed
CVE-2026-20818
was published
Jan 13, 2026
An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with...
Critical
Unreviewed
CVE-2024-6060
was published
Jun 26, 2024
Fujitsu / Fsas Technologies ETERNUS SF ACM/SC/Express (DX / AF Management Software) before 16.8...
Moderate
Unreviewed
CVE-2025-68919
was published
Dec 24, 2025
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26...
Low
Unreviewed
CVE-2025-46277
was published
Dec 17, 2025
In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft...
High
Unreviewed
CVE-2025-14432
was published
Dec 16, 2025
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and...
Moderate
Unreviewed
CVE-2025-43475
was published
Dec 17, 2025
An issue was discovered in BMC Control-M 9.0.21.300. When Control-M Server has a database...
Critical
Unreviewed
CVE-2025-48709
was published
Aug 7, 2025
IBM App Connect Enterprise Certified Container CD: 9.2.0 through 11.6.0, 12.1.0 through 12.14.0,...
Moderate
Unreviewed
CVE-2025-36133
was published
Dec 18, 2025
The Hummingbird Performance plugin for WordPress is vulnerable to Sensitive Information Exposure...
High
Unreviewed
CVE-2025-14437
was published
Dec 18, 2025
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sonoma...
Moderate
Unreviewed
CVE-2025-43538
was published
Dec 12, 2025
A privacy issue was addressed with improved private data redaction for log entries. This issue is...
Low
Unreviewed
CVE-2025-43517
was published
Dec 12, 2025
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.1 and...
Moderate
Unreviewed
CVE-2025-43426
was published
Nov 4, 2025
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.1 and...
Low
Unreviewed
CVE-2025-43423
was published
Nov 4, 2025
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.4.5, 18...
Low
Unreviewed
CVE-2025-13611
was published
Nov 26, 2025
An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0...
Moderate
Unreviewed
CVE-2024-47570
was published
Dec 9, 2025
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user...
Moderate
Unreviewed
CVE-2025-64650
was published
Dec 9, 2025
ProTip!
Advisories are also available from the
GraphQL API