GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
44
GitHub Actions
45
Go
3,196
Maven
5,000+
npm
5,000+
NuGet
864
pip
4,483
Pub
12
RubyGems
992
Rust
1,186
Swift
51
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
3,403 advisories
Filter by severity
A security flaw has been discovered in code-projects Online Music Site 1.0. Affected by this...
Moderate
Unreviewed
CVE-2026-2213
was published
Feb 9, 2026
A security vulnerability has been detected in Great Developers Certificate Generation System up...
Moderate
Unreviewed
CVE-2026-2183
was published
Feb 8, 2026
A security flaw has been discovered in detronetdip E-commerce 1.0.0. This issue affects some...
Moderate
Unreviewed
CVE-2026-2164
was published
Feb 8, 2026
A security flaw has been discovered in guchengwuyue yshopmall up to 1.9.1. This affects the...
Moderate
Unreviewed
CVE-2026-2146
was published
Feb 8, 2026
A weakness has been identified in code-projects Online Music Site 1.0. Impacted is an unknown...
Moderate
Unreviewed
CVE-2026-2133
was published
Feb 8, 2026
Azure Front Door Elevation of Privilege Vulnerability
Critical
Unreviewed
CVE-2026-24300
was published
Feb 6, 2026
Azure Arc Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2026-24302
was published
Feb 6, 2026
Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the...
Critical
Unreviewed
CVE-2025-68721
was published
Feb 5, 2026
A vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an...
Moderate
Unreviewed
CVE-2025-70997
was published
Feb 4, 2026
A vulnerability was found in bolo-blog bolo-solo up to 2.6.4. Affected is an unknown function of...
Moderate
Unreviewed
CVE-2026-1813
was published
Feb 4, 2026
Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local...
High
Unreviewed
CVE-2025-60865
was published
Feb 3, 2026
GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins....
High
Unreviewed
CVE-2020-37116
was published
Feb 3, 2026
Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program...
Low
Unreviewed
CVE-2025-6592
was published
Feb 3, 2026
A vulnerability was identified in EFM ipTIME A8004T 14.18.2. Affected by this vulnerability is...
Moderate
Unreviewed
CVE-2026-1742
was published
Feb 2, 2026
Improper Access Control vulnerability in Akın Software Computer Import Export Industry and Trade...
High
Unreviewed
CVE-2025-7016
was published
Jan 29, 2026
Dell PremierColor Panel Driver, versions prior to 1.0.0.1 A01, contains an Improper Access...
High
Unreviewed
CVE-2025-46691
was published
Jan 28, 2026
The Simple User Registration plugin for WordPress is vulnerable to privilege escalation in...
High
Unreviewed
CVE-2026-0844
was published
Jan 28, 2026
A vulnerability was found in iJason-Liu Books_Manager up to...
Moderate
Unreviewed
CVE-2026-1445
was published
Jan 27, 2026
Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with...
Critical
Unreviewed
CVE-2025-70982
was published
Jan 26, 2026
A vulnerability was determined in code-projects Online Examination System 1.0. Affected by this...
Moderate
Unreviewed
CVE-2026-1423
was published
Jan 26, 2026
A vulnerability was identified in PHPGurukul News Portal 1.0. This affects an unknown part of the...
Moderate
Unreviewed
CVE-2026-1424
was published
Jan 26, 2026
Incorrect access control in the authRoutes function of SpringBlade v4.5.0 allows attackers with...
Critical
Unreviewed
CVE-2025-70983
was published
Jan 23, 2026
Incorrect access control in the selectDept function of RuoYi v4.8.2 allows unauthorized attackers...
High
Unreviewed
CVE-2025-70986
was published
Jan 23, 2026
Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to...
Critical
Unreviewed
CVE-2025-70985
was published
Jan 23, 2026
An unauthenticated information disclosure vulnerability in Newgen OmniApp allows attackers to...
High
Unreviewed
CVE-2025-69908
was published
Jan 23, 2026
ProTip!
Advisories are also available from the
GraphQL API