Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,683
Erlang
34
GitHub Actions
26
Go
2,268
Maven
5,000+
npm
3,925
NuGet
705
pip
3,691
Pub
12
RubyGems
916
Rust
946
Swift
38
Unreviewed advisories
All unreviewed
5,000+

31 advisories

Loading
: Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB... Moderate Unreviewed
CVE-2024-9877 was published Apr 30, 2025
Moodle's mod_data edit/delete pages pass CSRF token in GET parameter Low
CVE-2025-3637 was published for moodle/moodle (Composer) Apr 25, 2025
In JotUrl 2.0, passwords are sent via HTTP GET-type requests, potentially exposing credentials to... Moderate Unreviewed
CVE-2025-24948 was published Apr 15, 2025
VCS credentials included in URL parameters are potentially logged and saved into browser history as plaintext Low
CVE-2025-32021 was published for weblate (pip) Apr 15, 2025
joonashak nijel
gersona
A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic.... Moderate Unreviewed
CVE-2025-2356 was published Mar 17, 2025
Maharashtra State Electricity Distribution Company Limited Mahavitran IOS Application 16.1... High Unreviewed
CVE-2021-41719 was published Mar 4, 2025
A Password Transmitted over Query String vulnerability has been found in Trivision Camera NC227WF... Moderate Unreviewed
CVE-2025-1738 was published Feb 27, 2025
Webkul QloApps v1.6.1 exposes authentication tokens in URLs during redirection. When users access... Moderate Unreviewed
CVE-2025-26058 was published Feb 18, 2025
The Mojave Inverter uses the GET method for sensitive information. High Unreviewed
CVE-2025-26473 was published Feb 14, 2025
A CWE-598 “Use of GET Request Method with Sensitive Query Strings” was discovered affecting the... Moderate Unreviewed
CVE-2024-12012 was published Feb 13, 2025
A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build... Moderate Unreviewed
CVE-2025-0730 was published Jan 27, 2025
An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity... High Unreviewed
CVE-2025-22387 was published Jan 4, 2025
IBM TXSeries for Multiplatforms 10.1 could allow an attacker to obtain sensitive information from... Moderate Unreviewed
CVE-2024-41738 was published Nov 1, 2024
Exposure of CSRF tokens in query parameters on specific requests in Checkmk GmbH's Checkmk... Low Unreviewed
CVE-2024-38863 was published Oct 14, 2024
Under certain circumstances the exacqVision Web Service can expose authentication token details... Moderate Unreviewed
CVE-2024-32931 was published Aug 2, 2024
IBM InfoSphere Information Server 11.7 returns sensitive information in URL information that... Moderate Unreviewed
CVE-2023-50954 was published Jun 30, 2024
An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web... High Unreviewed
CVE-2024-23766 was published Jun 26, 2024
dectalk-tts Uses Unencrypted HTTP Request High
CVE-2024-31206 was published for dectalk-tts (npm) Apr 4, 2024
AverageHelper JstnMcBrd
Rapid7's InsightVM maintenance mode login page suffers from a sensitive information exposure... Low Unreviewed
CVE-2024-2745 was published Apr 2, 2024
IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive... Low Unreviewed
CVE-2023-32335 was published Mar 13, 2024
Session Token in URL in directus Low
CVE-2024-28238 was published for directus (npm) Mar 12, 2024
IBM PowerSC 1.3, 2.0, and 2.1 may allow a remote attacker to view session identifiers passed via... Low Unreviewed
CVE-2023-50328 was published Feb 2, 2024
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local... Low Unreviewed
CVE-2023-6287 was published Nov 27, 2023
Ray Missing Authorization vulnerability Critical
CVE-2023-6020 was published for ray (pip) Nov 16, 2023
cpropps-sysdig
MLflow authentication requirement bypass can allow a user to arbitrarily create an account Critical
CVE-2023-6014 was published for mlflow (pip) Nov 16, 2023
MarkLee131 yoshizawa-masatoshi
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database