Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,407
Maven
5,000+
npm
5,000+
NuGet
1,048
pip
5,000+
Pub
13
RubyGems
1,127
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+

2,339 advisories

Loading
hono/jsx does not isolate context per request, leading to cross-request data disclosure Moderate
CVE-2026-59896 was published for hono (npm) Jul 21, 2026
thesmartshadow Credited to thesmartshadow
SurrealDB versions before 3.1.0 contain a time-of-check/time-of-use race condition in the HTTP ... Critical Unreviewed
CVE-2026-63756 was published Jul 20, 2026
A vulnerability was identified in awesto django-shop up to 1.2.4. Affected is an unknown function... Low Unreviewed
CVE-2026-16212 was published Jul 19, 2026
A vulnerability was determined in allegro up to bcf65b994ef29fb3fc2e10b660e6288723d5209e. This... Low Unreviewed
CVE-2026-16211 was published Jul 19, 2026
A flaw has been found in django-tastypie up to 0.15.1. The affected element is the function... Low Unreviewed
CVE-2026-16208 was published Jul 19, 2026
A vulnerability was identified in Sipeed PicoClaw up to 0.2.9. The impacted element is the... Low Unreviewed
CVE-2026-16082 was published Jul 18, 2026
IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an... Moderate Unreviewed
CVE-2026-15995 was published Jul 17, 2026
A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment ... High Unreviewed
CVE-2026-51082 was published Jul 17, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in... High Unreviewed
CVE-2026-58598 was published Jul 17, 2026
Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock Moderate
CVE-2026-53715 was published for github.com/envoyproxy/gateway (Go) Jul 16, 2026
zhaohuabing Credited to zhaohuabing
ViewComponent: Reused Component Instances Retain Stale Render Context Moderate
CVE-2026-54497 was published for view_component (RubyGems) Jul 15, 2026
cyberlanc3r Credited to cyberlanc3r
Concurrent execution using shared resource with improper synchronization ('race condition') in... High Unreviewed
CVE-2026-58628 was published Jul 14, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in... Moderate Unreviewed
CVE-2026-58543 was published Jul 14, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in... High Unreviewed
CVE-2026-58527 was published Jul 14, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in... High Unreviewed
CVE-2026-58531 was published Jul 14, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in... Moderate Unreviewed
CVE-2026-56649 was published Jul 14, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in... Critical Unreviewed
CVE-2026-56188 was published Jul 14, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in... High Unreviewed
CVE-2026-54125 was published Jul 14, 2026
Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges... High Unreviewed
CVE-2026-50689 was published Jul 14, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in... High Unreviewed
CVE-2026-50667 was published Jul 14, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in... High Unreviewed
CVE-2026-50669 was published Jul 14, 2026
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. High Unreviewed
CVE-2026-50672 was published Jul 14, 2026
Use after free in Windows Media allows an authorized attacker to elevate privileges locally. High Unreviewed
CVE-2026-50677 was published Jul 14, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in... High Unreviewed
CVE-2026-50676 was published Jul 14, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in... High Unreviewed
CVE-2026-50503 was published Jul 14, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database