Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,521
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,514
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

34 advisories

Loading
Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's... Moderate Unreviewed
CVE-2026-43617 was published May 20, 2026
axios's shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718) High
CVE-2026-44492 was published for axios (npm) May 29, 2026
HamdaanAliQuatil Credited to HamdaanAliQuatil and jasonsaayman jasonsaayman jasonsaayman
The JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' (Audience) claims of... Critical Unreviewed
CVE-2026-50627 was published Jun 12, 2026
When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted... High Unreviewed
CVE-2026-56091 was published Jun 25, 2026
A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead... High Unreviewed
CVE-2026-48618 was published Jun 26, 2026
Coder vulnerable to OIDC account takeover via email-based user matching and email_verified bypass High
CVE-2026-55075 was published for github.com/coder/coder/v2 (Go) Jul 6, 2026
The Eventer plugin for WordPress is vulnerable to an insecure password reset mechanism in all... Critical Unreviewed
CVE-2026-9701 was published Jul 8, 2026
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0... High Unreviewed
CVE-2026-10842 was published Jul 30, 2026
The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all... Critical Unreviewed
CVE-2026-8457 was published Aug 2, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database