Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
117
GitHub Actions
55
Go
4,836
Maven
5,000+
npm
5,000+
NuGet
1,126
pip
5,000+
Pub
13
RubyGems
1,157
Rust
1,577
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20

3 advisories

Loading
nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition High
CVE-2026-61628 was published for github.com/lucasdillmann/nginx-ignition (Go) Sep 21, 2026
tikket1 Credited to tikket1 and lucasdillmann lucasdillmann lucasdillmann
nginx ignition has ParseAcceptLanguage `_` separator bypass that enables ~75x CPU amplification via Accept-Language header in i18nMiddleware High
CVE-2026-61629 was published for github.com/lucasdillmann/nginx-ignition (Go) Sep 21, 2026
tonghuaroot Credited to tonghuaroot and lucasdillmann lucasdillmann lucasdillmann
nginx ignition has TOTP Reuse During Validity Window Moderate
CVE-2026-61630 was published for github.com/lucasdillmann/nginx-ignition (Go) Sep 21, 2026
alp1n3-dev Credited to alp1n3-dev and lucasdillmann lucasdillmann lucasdillmann
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database