GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,785
Erlang
36
GitHub Actions
29
Go
2,358
Maven
5,000+
npm
3,979
NuGet
720
pip
3,777
Pub
12
RubyGems
924
Rust
981
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
112 advisories
Filter by severity
Improper Restriction of Excessive Authentication Attempts vulnerability in Art-in Bilişim...
Critical
Unreviewed
CVE-2025-4383
was published
Jun 26, 2025
RAGFlow through 0.18.1 allows account takeover because it is possible to conduct successful brute...
Critical
Unreviewed
CVE-2025-48187
was published
May 17, 2025
Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows...
Critical
Unreviewed
CVE-2023-27172
was published
Dec 20, 2023
Agentflow from Flowring Technology has an Account Lockout Bypass vulnerability, allowing...
Critical
Unreviewed
CVE-2025-3709
was published
May 2, 2025
Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication...
Critical
Unreviewed
CVE-2016-9124
was published
May 13, 2022
An attacker can decrypt the Ovarro TBox login password by communication capture and brute force...
Critical
Unreviewed
CVE-2021-22640
was published
Jul 29, 2022
A lack of rate limiting in the login page of Safe App version a3.0.9 allows attackers to bypass...
Critical
Unreviewed
CVE-2025-25595
was published
Mar 18, 2025
A lack of rate limiting on the password reset endpoint of Chamberlain myQ v5.222.0.32277 (on iOS)...
Critical
Unreviewed
CVE-2023-24080
was published
Feb 22, 2023
Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate...
Critical
Unreviewed
CVE-2023-27100
was published
Mar 23, 2023
An issue in the BYD Dilink Headunit System v3.0 to v4.0 allows attackers to bypass authentication...
Critical
Unreviewed
CVE-2024-46442
was published
Dec 10, 2024
There is no limit on the number of failed login attempts permitted with the Clinician Password or...
Critical
Unreviewed
CVE-2024-9832
was published
Nov 14, 2024
This vulnerability exists in the Wave 2.0 due to missing restrictions for excessive failed...
Critical
Unreviewed
CVE-2024-51558
was published
Nov 4, 2024
A lack of rate limiting in the OTP validation component of Digitory Multi Channel Integrated POS...
Critical
Unreviewed
CVE-2024-48143
was published
Oct 24, 2024
This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect...
Critical
Unreviewed
CVE-2024-47656
was published
Oct 4, 2024
A vulnerability in Kaiten version 57.131.12 and earlier allows attackers to bypass the PIN code...
Critical
Unreviewed
CVE-2024-41276
was published
Oct 1, 2024
This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive...
Critical
Unreviewed
CVE-2024-47088
was published
Sep 19, 2024
An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x...
Critical
Unreviewed
CVE-2024-45523
was published
Sep 18, 2024
Pluck CMS 4.7.18 does not restrict failed login attempts, allowing attackers to execute a brute...
Critical
Unreviewed
CVE-2024-43042
was published
Aug 16, 2024
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for...
Critical
Unreviewed
CVE-2024-45790
was published
Sep 11, 2024
Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions...
Critical
Unreviewed
CVE-2024-42465
was published
Aug 16, 2024
Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions...
Critical
Unreviewed
CVE-2024-42466
was published
Aug 16, 2024
GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000...
Critical
Unreviewed
CVE-2024-39225
was published
Aug 6, 2024
A client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows...
Critical
Unreviewed
CVE-2023-24051
was published
Dec 5, 2023
DECISO OPNsense 23.1 does not impose rate limits for authentication, allowing attackers to...
Critical
Unreviewed
CVE-2023-27152
was published
Oct 23, 2023
There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware...
Critical
Unreviewed
CVE-2023-40706
was published
Aug 24, 2023
ProTip!
Advisories are also available from the
GraphQL API