Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,340
Maven
5,000+
npm
5,000+
NuGet
1,033
pip
5,000+
Pub
13
RubyGems
1,122
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+

15,578 advisories

Loading
Insertion of sensitive information into a file in the Recovery Kit response file generation... Low Unreviewed
CVE-2026-15642 was published Jul 14, 2026
Improper authorization in the secure messages deletion endpoint in Devolutions Server 2026.2.11,... Low Unreviewed
CVE-2026-15058 was published Jul 14, 2026
Prototype pollution in @feathersjs/commons _.merge via JSON-parsed __proto__ Low
CVE-2026-54335 was published for @feathersjs/commons (npm) Jul 14, 2026
ridingsa Credited to ridingsa
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized... Low Unreviewed
CVE-2026-50416 was published Jul 14, 2026
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized... Low Unreviewed
CVE-2026-50419 was published Jul 14, 2026
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected... Low Unreviewed
CVE-2026-15715 was published Jul 14, 2026
A security flaw has been discovered in DedeCMS 5.7.118. Affected by this vulnerability is the... Low Unreviewed
CVE-2026-15700 was published Jul 14, 2026
A security vulnerability has been detected in tamagui up to 2.3.0. This affects the function... Low Unreviewed
CVE-2026-15702 was published Jul 14, 2026
A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget... Low Unreviewed
CVE-2026-15697 was published Jul 14, 2026
A vulnerability was identified in spencermountain compromise up to 14.15.1. Affected is the... Low Unreviewed
CVE-2026-15699 was published Jul 14, 2026
A vulnerability was determined in kofrasa mingo up to 7.2.1. This impacts the function update... Low Unreviewed
CVE-2026-15698 was published Jul 14, 2026
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')... Low Unreviewed
CVE-2025-62675 was published Jul 14, 2026
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')... Low Unreviewed
CVE-2025-62826 was published Jul 14, 2026
Wasmtime: Memory leak in C API with `externref` and `anyref` types Low
CVE-2025-61670 was published for wasmtime-bin (pip) Jul 14, 2026
alexcrichton Credited to alexcrichton
FacturaScripts: Stored XSS in WidgetVariante and WidgetSubcuenta modal lists via HTML-attribute decoding of `Tools::noHtml`-escaped quotes inside `onclick=` Low
CVE-2026-45710 was published for facturascripts/facturascripts (Composer) Jul 14, 2026
A vulnerability was identified in open62541 up to 1.5.5. Affected by this issue is the function... Low Unreviewed
CVE-2026-15690 was published Jul 14, 2026
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in SUSE... Low Unreviewed
CVE-2025-8412 was published Jul 14, 2026
A security vulnerability has been detected in code-projects Online Job Portal 1.0. This impacts... Low Unreviewed
CVE-2026-15678 was published Jul 14, 2026
A vulnerability was found in louisho5 picobot up to 0.2.0. This issue affects the function... Low Unreviewed
CVE-2026-15669 was published Jul 14, 2026
A vulnerability was determined in itsourcecode Electronic Judging System 1.0. Impacted is an... Low Unreviewed
CVE-2026-15672 was published Jul 14, 2026
A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar... Low Unreviewed
CVE-2026-12482 was published Jul 14, 2026
A vulnerability has been found in louisho5 picobot up to 0.2.0. This vulnerability affects the... Low Unreviewed
CVE-2026-15668 was published Jul 14, 2026
A vulnerability was determined in nextlevelbuilder GoClaw 3.13.3-beta.3. This affects the... Low Unreviewed
CVE-2026-15626 was published Jul 14, 2026
A security flaw has been discovered in zhayujie chatgpt-on-wechat CowAgent up to 2.1.1. This... Low Unreviewed
CVE-2026-15628 was published Jul 14, 2026
A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This vulnerability... Low Unreviewed
CVE-2026-15627 was published Jul 14, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database