Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,521
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,514
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,319 advisories

Loading
The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2026-15348 was published Jul 23, 2026
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component:... Moderate Unreviewed
CVE-2026-60434 was published Jul 22, 2026
The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid... Moderate Unreviewed
CVE-2025-68640 was published Jul 21, 2026
A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown... Moderate Unreviewed
CVE-2026-16209 was published Jul 19, 2026
A vulnerability was found in newpanjing simpleui 2026.01.13. This affects the function self... Moderate Unreviewed
CVE-2026-16210 was published Jul 19, 2026
SurrealDB before 1.5.4 fails to properly validate authentication when a scope user switches... Moderate Unreviewed
CVE-2024-58363 was published Jul 18, 2026
A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This affects the function... Moderate Unreviewed
CVE-2026-16083 was published Jul 18, 2026
n8n contains an authentication bypass in the Chat Trigger node when configured with n8n User Auth... Moderate Unreviewed
CVE-2026-56353 was published Jul 15, 2026
A weakness has been identified in waooAI waoowaoo up to 0.4.1. Affected by this vulnerability is... Moderate Unreviewed
CVE-2026-15557 was published Jul 13, 2026
A vulnerability has been found in will-moss Isaiah up to 1.36.9. This affects an unknown function... Moderate Unreviewed
CVE-2026-15542 was published Jul 13, 2026
A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to... Moderate Unreviewed
CVE-2026-15491 was published Jul 12, 2026
vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions: *.*. Moderate Unreviewed
CVE-2026-15087 was published Jul 11, 2026
Capgo before 12.128.2 contains an improper validation vulnerability in the accept_invitation... Moderate Unreviewed
CVE-2026-56312 was published Jul 10, 2026
A vulnerability has been found in mettle sendportal up to 3.0.1. This issue affects the function... Moderate Unreviewed
CVE-2026-15192 was published Jul 9, 2026
A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.1.0. This issue affects... Moderate Unreviewed
CVE-2026-14714 was published Jul 5, 2026
A vulnerability was found in jairiidriss restaurant-website-php-mysql up to... Moderate Unreviewed
CVE-2026-14622 was published Jul 4, 2026
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program... Moderate Unreviewed
CVE-2026-58029 was published Jul 1, 2026
Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the... Moderate Unreviewed
CVE-2026-55955 was published Jun 29, 2026
A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown code of... Moderate Unreviewed
CVE-2026-13546 was published Jun 29, 2026
TLS 1.3 post-handshake authentication (PHA) issue where a server could accept a client's Finished... Moderate Unreviewed
CVE-2026-55962 was published Jun 26, 2026
Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped the... Moderate Unreviewed
CVE-2026-11703 was published Jun 26, 2026
A flaw was found in KubeVirt's virt-handler domain notify server. The gRPC handlers for... Moderate Unreviewed
CVE-2026-13208 was published Jun 24, 2026
Low‑privileged session IDs generated for the web admin console could be reused in the XML‑RPC API... Moderate Unreviewed
CVE-2026-34917 was published Jun 23, 2026
A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json... Moderate Unreviewed
CVE-2026-12795 was published Jun 21, 2026
A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function... Moderate Unreviewed
CVE-2026-12773 was published Jun 21, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database