Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,506
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,144
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

33,976 advisories

Loading
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2026-12801 was published Aug 7, 2026
AIL Project contains a stored cross-site scripting vulnerability in the translation controls... Moderate Unreviewed
CVE-2026-71447 was published Aug 7, 2026
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view.... Moderate Unreviewed
CVE-2026-71446 was published Aug 7, 2026
The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger... Moderate Unreviewed
CVE-2025-6508 was published Aug 7, 2026
Contributor Cross Site Scripting (XSS) in MailOptin <= 1.2.78.0 versions. Moderate Unreviewed
CVE-2026-66703 was published Aug 6, 2026
Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions. Moderate Unreviewed
CVE-2026-66706 was published Aug 6, 2026
Contributor Cross Site Scripting (XSS) in Ultimate Addons for Elementor <= 1.45.2 versions. Moderate Unreviewed
CVE-2026-66688 was published Aug 6, 2026
Shop manager Cross Site Scripting (XSS) in FiboSearch <= 1.33.0 versions. Moderate Unreviewed
CVE-2026-28179 was published Aug 6, 2026
Contributor Cross Site Scripting (XSS) in Powerkit <= 3.1.0 versions. Moderate Unreviewed
CVE-2026-28178 was published Aug 6, 2026
Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions. Moderate Unreviewed
CVE-2026-61959 was published Aug 6, 2026
The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin... Moderate Unreviewed
CVE-2026-18501 was published Aug 6, 2026
The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ... Moderate Unreviewed
CVE-2026-5391 was published Aug 6, 2026
Improper neutralization of input during web page generation ('cross-site scripting')... Moderate Unreviewed
CVE-2026-8166 was published Aug 6, 2026
The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is... Moderate Unreviewed
CVE-2026-5158 was published Aug 6, 2026
The Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider plugin for WordPress... Moderate Unreviewed
CVE-2026-18400 was published Aug 6, 2026
The Nexter Blocks WordPress plugin before 5.0.2 does not sanitize uploaded SVG files and allows... Moderate Unreviewed
CVE-2025-15678 was published Aug 6, 2026
The EONSR AEO Agent WordPress plugin through 3.7.9 does not perform any authorisation check on... Moderate Unreviewed
CVE-2026-11588 was published Aug 6, 2026
The Slick Slider WordPress plugin before 0.5.3 does not sanitize and escape a shortcode attribute... Moderate Unreviewed
CVE-2026-16537 was published Aug 6, 2026
The Child Pages Card WordPress plugin before 1.09 does not sanitise and escape some of its... Moderate Unreviewed
CVE-2026-18395 was published Aug 6, 2026
Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript... Moderate Unreviewed
CVE-2026-70441 was published Aug 5, 2026
Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user... Moderate Unreviewed
CVE-2026-70440 was published Aug 5, 2026
A vulnerability in the web-based management interface of Cisco Integrated Management Controller ... Moderate Unreviewed
CVE-2026-20198 was published Aug 5, 2026
ProjectSend r2029 contains a reflected cross-site scripting vulnerability in thumbnails... Moderate Unreviewed
CVE-2026-53992 was published Aug 5, 2026
OpenBK7231T's http_fn_ota_exec() (src/httpserver/http_fns.c) reflects the `host` query parameter... Moderate Unreviewed
CVE-2026-71275 was published Aug 5, 2026
299Ko's public contact form (plugin/contact/controllers/ContactController.php, home()) sets raw... Moderate Unreviewed
CVE-2026-71249 was published Aug 5, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database