Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,506
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,144
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

3,483 advisories

Loading
AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/add_tags... High Unreviewed
CVE-2026-71445 was published Aug 7, 2026
Subscriber Cross Site Scripting (XSS) in WooCommerce Multilingual & Multicurrency <= 5.5.6 versions. High Unreviewed
CVE-2026-66711 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions. High Unreviewed
CVE-2026-66439 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions. High Unreviewed
CVE-2026-66690 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions. High Unreviewed
CVE-2026-66705 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in Rank Math SEO <= 1.0.274.1 versions. High Unreviewed
CVE-2026-66702 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in Thrive Architect <= 10.9.3.1 versions. High Unreviewed
CVE-2026-66694 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in Facebook for WooCommerce <= 3.7.5 versions. High Unreviewed
CVE-2026-66707 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions. High Unreviewed
CVE-2026-66440 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in Events Manager <= 7.4.1 versions. High Unreviewed
CVE-2026-66457 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions. High Unreviewed
CVE-2026-65560 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.0 versions. High Unreviewed
CVE-2026-66664 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions. High Unreviewed
CVE-2026-66663 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions. High Unreviewed
CVE-2026-65565 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.10 versions. High Unreviewed
CVE-2026-65513 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in Ninja Tables <= 5.2.9 versions. High Unreviewed
CVE-2026-61964 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Button <= 2.0.4 versions. High Unreviewed
CVE-2026-65517 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 7.5.1 versions. High Unreviewed
CVE-2026-65509 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.35.0 versions. High Unreviewed
CVE-2026-65515 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in SiteGuard WP Plugin <= 1.8.6 versions. High Unreviewed
CVE-2026-61982 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in Super Socializer <= 7.14.5 versions. High Unreviewed
CVE-2026-65544 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions. High Unreviewed
CVE-2026-65545 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.13.1 versions. High Unreviewed
CVE-2026-28082 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions. High Unreviewed
CVE-2026-61961 was published Aug 6, 2026
Unauthenticated Cross Site Scripting (XSS) in Popup Maker <= 1.23.0 versions. High Unreviewed
CVE-2026-28177 was published Aug 6, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database