Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,608
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

572 advisories

Loading
Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials. High Unreviewed
CVE-2026-42929 was published May 29, 2026
AgenticMail API/storage and outbound relay hardening fixes High
CVE-2026-47255 was published for @agenticmail/api (npm) May 29, 2026
IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as a... High Unreviewed
CVE-2026-5065 was published May 27, 2026
Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow... High Unreviewed
CVE-2026-36538 was published May 27, 2026
Comarch ERP Optima client makes use of a hard-coded password for a database user. These... High Unreviewed
CVE-2025-68421 was published May 14, 2026
Huawei HG630 V2 router contains an authentication bypass vulnerability that allows... High Unreviewed
CVE-2020-37220 was published May 13, 2026
A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter... High Unreviewed
CVE-2026-33893 was published May 12, 2026
Easy PayPal Events & Tickets plugin for WordPress version 1.3 and earlier contain a hardcoded... High Unreviewed
CVE-2026-32834 was published May 4, 2026
D-Link DIR-605L Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded telnet backdoor. The... High Unreviewed
CVE-2026-42372 was published May 4, 2026
Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials. High Unreviewed
CVE-2026-27785 was published Apr 28, 2026
The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive... High Unreviewed
CVE-2026-1233 was published Apr 4, 2026
Storage credentials are hardcoded in the mobile app and device firmware. These credentials do not... High Unreviewed
CVE-2025-10681 was published Apr 3, 2026
HCL Aftermarket DPC is affected by SQL Injection which allows attacker to exploit this... High Unreviewed
CVE-2025-55262 was published Mar 26, 2026
HCL Aftermarket DPC is affected by Hardcoded Sensitive Data which allows attacker to gain access... High Unreviewed
CVE-2025-55263 was published Mar 26, 2026
Use of Hard-coded Credentials vulnerability in Addi Addi &#8211; Cuotas que se adaptan a ti buy... High Unreviewed
CVE-2026-27073 was published Mar 25, 2026
A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210,... High Unreviewed
CVE-2025-15605 was published Mar 23, 2026
Use of hard-coded credentials in Klinika XP and KlinikaXP Insertino allowed an unauthorized... High Unreviewed
CVE-2026-1958 was published Mar 23, 2026
Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not... High Unreviewed
CVE-2026-3873 was published Mar 13, 2026
A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer... High Unreviewed
CVE-2026-28255 was published Mar 12, 2026
eWON Firmware versions 12.2 to 13.0 contain an authentication bypass vulnerability that allows... High Unreviewed
CVE-2019-25470 was published Mar 11, 2026
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information... High Unreviewed
CVE-2025-13957 was published Mar 10, 2026
FUXA has a hardcoded fallback JWT signing secret High
CVE-2025-69971 was published for @frangoteam/fuxa (npm) Mar 7, 2026
blankshiro Credited to blankshiro
International Datacasting Corporation (IDC) SFX Series SuperFlex(SFX2100) SatelliteReceiver... High Unreviewed
CVE-2026-29119 was published Mar 4, 2026
International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver contains... High Unreviewed
CVE-2026-28776 was published Mar 4, 2026
International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver contains... High Unreviewed
CVE-2026-28778 was published Mar 4, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database