Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
91
GitHub Actions
54
Go
4,194
Maven
5,000+
npm
5,000+
NuGet
1,021
pip
5,000+
Pub
13
RubyGems
1,102
Rust
1,422
Swift
61
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

220 advisories

Loading
Capgo before 12.128.2 allows org admins to assign org-scoped RBAC roles at app scope without... High Unreviewed
CVE-2026-56247 was published Jul 1, 2026
Because O+ Connect's IPC service does not authenticate clients, external applications can... High Unreviewed
CVE-2026-22078 was published Jun 29, 2026
Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions. High Unreviewed
CVE-2026-56010 was published Jun 26, 2026
Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions. High Unreviewed
CVE-2026-56008 was published Jun 26, 2026
Capgo before 12.128.2 contains a broken row level security policy in the org_users table that... High Unreviewed
CVE-2026-56251 was published Jun 21, 2026
A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown... High Unreviewed
CVE-2026-12784 was published Jun 21, 2026
A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by... High Unreviewed
CVE-2026-12786 was published Jun 21, 2026
A vulnerability was identified in EaseUS Partition Master up to 14.5. The affected element is an... High Unreviewed
CVE-2026-12781 was published Jun 21, 2026
A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted element... High Unreviewed
CVE-2026-12782 was published Jun 21, 2026
A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability... High Unreviewed
CVE-2026-12778 was published Jun 21, 2026
A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects some... High Unreviewed
CVE-2026-12779 was published Jun 21, 2026
A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in... High Unreviewed
CVE-2026-12780 was published Jun 21, 2026
Subscriber Privilege Escalation in Falang multilanguage <= 1.4.2 versions. High Unreviewed
CVE-2026-54805 was published Jun 17, 2026
Subscriber Privilege Escalation in MultiLoca <= 4.2.15 versions. High Unreviewed
CVE-2026-39546 was published Jun 17, 2026
Subscriber Privilege Escalation in Genemy <= 1.6.6 versions. High Unreviewed
CVE-2025-69138 was published Jun 17, 2026
Subscriber Privilege Escalation in Sonaar <= 4.27.4 versions. High Unreviewed
CVE-2025-59563 was published Jun 17, 2026
Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in... High Unreviewed
CVE-2026-12289 was published Jun 16, 2026
Customer Privilege Escalation in Dokan <= 5.0.2 versions. High Unreviewed
CVE-2026-49780 was published Jun 15, 2026
Subscriber Privilege Escalation in Amelia <= 2.3 versions. High Unreviewed
CVE-2026-48889 was published Jun 15, 2026
Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions. High Unreviewed
CVE-2026-49063 was published Jun 15, 2026
Contributor Privilege Escalation in LatePoint <= 5.5.1 versions. High Unreviewed
CVE-2026-49083 was published Jun 15, 2026
Contributor Privilege Escalation in B Blocks <= 2.0.31 versions. High Unreviewed
CVE-2026-39579 was published Jun 15, 2026
Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions. High Unreviewed
CVE-2026-39587 was published Jun 15, 2026
Shop manager Privilege Escalation in WooCommerce Cart Abandonment Recovery < 2.1.0 versions. High Unreviewed
CVE-2026-39470 was published Jun 15, 2026
Editor Privilege Escalation in AI Engine <= 3.4.9 versions. High Unreviewed
CVE-2026-27407 was published Jun 15, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database