Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
44
GitHub Actions
45
Go
3,196
Maven
5,000+
npm
5,000+
NuGet
864
pip
4,483
Pub
12
RubyGems
992
Rust
1,186
Swift
51
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

3,403 advisories

Loading
Enable exports of the database and associated exported information of the system via the default... High Unreviewed
CVE-2024-0551 was published Feb 27, 2024
An Incorrect Access Control vulnerability exists in INDEX-EDUCATION PRONOTE prior to 2025.2.8.... Moderate Unreviewed
CVE-2025-69727 was published Mar 16, 2026
Insufficient policy enforcement in PDF in Google Chrome on Android prior to 146.0.7680.71 allowed... High Unreviewed
CVE-2026-3932 was published Mar 12, 2026
Insufficient policy enforcement in Clipboard in Google Chrome prior to 146.0.7680.71 allowed a... Moderate Unreviewed
CVE-2026-3938 was published Mar 12, 2026
Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a... Moderate Unreviewed
CVE-2026-3940 was published Mar 12, 2026
Insufficient policy enforcement in ChromeDriver in Google Chrome prior to 146.0.7680.71 allowed a... Moderate Unreviewed
CVE-2026-3934 was published Mar 12, 2026
Insufficient policy enforcement in PDF in Google Chrome prior to 146.0.7680.71 allowed a remote... Moderate Unreviewed
CVE-2026-3939 was published Mar 12, 2026
A vulnerability has been found in Technologies Integrated Management Platform 7.17.0. Affected by... Moderate Unreviewed
CVE-2026-4220 was published Mar 16, 2026
A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. This affects an... Moderate Unreviewed
CVE-2026-4221 was published Mar 16, 2026
A weakness has been identified in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393... Moderate Unreviewed
CVE-2026-4201 was published Mar 16, 2026
A flaw has been found in JawherKl node-api-postgres up to 2.5. Affected is the function path... Moderate Unreviewed
CVE-2026-4191 was published Mar 16, 2026
Insecure Direct Object Reference (IDOR) vulnerability in Campus Educativa specifically at the... High Unreviewed
CVE-2026-3110 was published Mar 16, 2026
Insecure Direct Object Reference (IDOR) vulnerability in Campus Educativa specifically at the... Moderate Unreviewed
CVE-2026-3111 was published Mar 16, 2026
IBM CICS Transaction Gateway for Multiplatforms 9.3 and 10.1 could allow a user to transfer or... Moderate Unreviewed
CVE-2026-0977 was published Mar 16, 2026
Dell ECS, versions 3.6 through 3.6.2.5, and 3.7 through 3.7.0.6, and 3.8 through 3.8.0.4 versions... Moderate Unreviewed
CVE-2024-22459 was published Feb 28, 2024
A vulnerability in the access control list (ACL) programming for port channel subinterfaces of... Moderate Unreviewed
CVE-2024-20291 was published Feb 29, 2024
An authorization bypass vulnerability was discovered in GitLab affecting versions 15.1 prior to... High Unreviewed
CVE-2024-0410 was published Feb 22, 2024
An issue has been discovered in GitLab EE affecting all versions starting from 12.0 to 16.7.6,... Moderate Unreviewed
CVE-2023-4895 was published Feb 22, 2024
An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16... Moderate Unreviewed
CVE-2024-1525 was published Feb 22, 2024
An issue has been discovered in GitLab affecting all versions before 16.7.6, all versions... Low Unreviewed
CVE-2023-3509 was published Feb 22, 2024
DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an improper access... High Unreviewed
CVE-2023-39244 was published Feb 15, 2024
EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing... Moderate Unreviewed
CVE-2024-26263 was published Feb 15, 2024
Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0... Critical Unreviewed
CVE-2025-66956 was published Mar 11, 2026
On TP-Link Tapo C260 v1, a guest‑level authenticated user can bypass intended access restrictions... High Unreviewed
CVE-2026-0653 was published Feb 10, 2026
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on... Critical Unreviewed
CVE-2026-21667 was published Mar 12, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database