GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,300
Erlang
31
GitHub Actions
21
Go
2,069
Maven
5,000+
npm
3,744
NuGet
668
pip
3,429
Pub
12
RubyGems
892
Rust
880
Swift
36
Unreviewed advisories
All unreviewed
5,000+
90 advisories
Filter by severity
Traefik may display authorization header in the debug logs
Low
CVE-2022-23469
was published
for
github.com/traefik/traefik/v2
(Go)
Dec 8, 2022
Shopware's log module vulnerable to Improper Output Neutralization
Low
CVE-2023-22733
was published
for
shopware/core
(Composer)
Jan 20, 2023
Juiker app stores debug logs which contains sensitive information to mobile external storage. An...
Low
Unreviewed
CVE-2022-39043
was published
Mar 27, 2023
In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file
Low
Unreviewed
CVE-2022-48435
was published
Apr 4, 2023
Sensitive Terraform Output Values Printed At Info Logging Level In Kitchen-Terraform
Low
CVE-2023-30618
was published
for
kitchen-terraform
(RubyGems)
Apr 24, 2023
Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http...
Low
Unreviewed
CVE-2023-31413
was published
May 4, 2023
An issue was discovered in Faronics Insight 10.0.19045 on Windows. Every keystroke made by any...
Low
Unreviewed
CVE-2023-28351
was published
May 31, 2023
A privacy issue was addressed with improved private data redaction for log entries. This issue is...
Low
Unreviewed
CVE-2023-23505
was published
Jul 6, 2023
An information disclosure issue in Gitlab CE/EE affecting all versions from 13.6 prior to 15.11...
Low
Unreviewed
CVE-2023-3363
was published
Jul 13, 2023
A vulnerability was found in rkhunter Rootkit Hunter 1.4.4/1.4.6. It has been classified as...
Low
Unreviewed
CVE-2023-4413
was published
Aug 18, 2023
A privacy issue was addressed with improved private data redaction for log entries. This issue is...
Low
Unreviewed
CVE-2023-40392
was published
Sep 6, 2023
A privacy issue was addressed with improved private data redaction for log entries. This issue is...
Low
Unreviewed
CVE-2023-40442
was published
Sep 12, 2023
A vulnerability, which was classified as problematic, has been found in China Unicom TEWA-800G 4...
Low
Unreviewed
CVE-2023-5028
was published
Sep 17, 2023
An issue was discovered in Plixer Scrutinizer before 19.3.1. It exposes debug logs to...
Low
Unreviewed
CVE-2023-41263
was published
Oct 13, 2023
Wagtail vulnerable to disclosure of user names via admin bulk action views
Low
CVE-2023-45809
was published
for
wagtail
(pip)
Oct 19, 2023
A privacy issue was addressed with improved private data redaction for log entries. This issue is...
Low
Unreviewed
CVE-2023-40405
was published
Oct 25, 2023
A privacy issue was addressed with improved private data redaction for log entries. This issue is...
Low
Unreviewed
CVE-2023-42857
was published
Oct 25, 2023
An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version...
Low
Unreviewed
CVE-2023-45585
was published
Nov 14, 2023
Insertion of sensitive information into log file for some Intel Unison software may allow an...
Low
Unreviewed
CVE-2022-46647
was published
Nov 14, 2023
Exposure of Sensitive Information in Elastic APM .NET Agent
Low
CVE-2021-22143
was published
for
Elastic.Apm
(NuGet)
Nov 22, 2023
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local...
Low
Unreviewed
CVE-2023-6287
was published
Nov 27, 2023
nvdApiKey is logged in debug mode
Low
GHSA-qqhq-8r2c-c3f5
was published
for
org.owasp:dependency-check-ant
(Maven)
Dec 15, 2023
A vulnerability was found in code-projects Dormitory Management System 1.0. It has been rated as...
Low
Unreviewed
CVE-2024-0472
was published
Jan 13, 2024
A vulnerability classified as problematic has been found in Beijing Baichuo Smart S150 Management...
Low
Unreviewed
CVE-2024-0716
was published
Jan 19, 2024
In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was...
Low
Unreviewed
CVE-2024-24939
was published
Feb 6, 2024
ProTip!
Advisories are also available from the
GraphQL API