Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,506
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,144
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

305 advisories

Loading
OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows... Critical Unreviewed
CVE-2026-66418 was published Jul 30, 2026
IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is... Critical Unreviewed
CVE-2026-11707 was published Jul 30, 2026
Pivotick contains a DOM-based cross-site scripting vulnerability in its generic UI element... Critical Unreviewed
CVE-2026-67174 was published Jul 28, 2026
A stored cross-site scripting vulnerability existed in the capture tree visualization page. The... Critical Unreviewed
CVE-2026-66824 was published Jul 27, 2026
SiYuan before v3.7.3 contains stored and reflected cross-site scripting vulnerabilities in SVG... Critical Unreviewed
CVE-2026-66394 was published Jul 27, 2026
SiYuan desktop before v3.7.2 contains a reflected cross-site scripting vulnerability in the... Critical Unreviewed
CVE-2026-66395 was published Jul 27, 2026
SiYuan before v3.7.2 fails to escape the title-img Individual Attribute List value when rendering... Critical Unreviewed
CVE-2026-66396 was published Jul 27, 2026
SiYuan before v3.7.2 contains a cross-site scripting vulnerability in the siyuan:// protocol... Critical Unreviewed
CVE-2026-65606 was published Jul 23, 2026
SiYuan before v3.7.2 contains a stored cross-site scripting vulnerability in Attribute View ... Critical Unreviewed
CVE-2026-65605 was published Jul 23, 2026
Unblu Spark contains an open redirect vulnerability that can be escalated to a DOM-based cross... Critical Unreviewed
CVE-2026-8152 was published Jul 22, 2026
Ninja Forms plugin for WordPress versions 3.10.4 through 3.14.9 contains an unauthenticated... Critical Unreviewed
CVE-2026-65048 was published Jul 21, 2026
The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsanitised SVG uploads... Critical Unreviewed
CVE-2026-60034 was published Jul 20, 2026
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary... Critical Unreviewed
CVE-2026-15091 was published Jul 17, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft... Critical Unreviewed
CVE-2026-55008 was published Jul 14, 2026
vulnerability in Drupal Mother May I allows . This issue affects Mother May I versions: *.*. Critical Unreviewed
CVE-2026-11913 was published Jul 11, 2026
LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables,... Critical Unreviewed
CVE-2026-61876 was published Jul 12, 2026
Improper neutralization of input during web page generation ('cross-site scripting')... Critical Unreviewed
CVE-2026-2342 was published Jul 9, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics... Critical Unreviewed
CVE-2026-47646 was published Jul 9, 2026
Cross Site Scripting vulnerability in Ruckus Wireless (CommScope) Ruckus CloudPath v.5.12.54414... Critical Unreviewed
CVE-2023-45992 was published Oct 19, 2023
Unauthenticated Cross Site Scripting (XSS) in Admin and Site Enhancements (ASE) Pro <= 8.8.5... Critical Unreviewed
CVE-2026-57625 was published Jul 2, 2026
IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability... Critical Unreviewed
CVE-2026-11712 was published Jun 30, 2026
IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability... Critical Unreviewed
CVE-2026-11708 was published Jun 30, 2026
Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in... Critical Unreviewed
CVE-2026-8948 was published May 19, 2026
SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar... Critical Unreviewed
CVE-2026-56397 was published Jun 21, 2026
SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar... Critical Unreviewed
CVE-2026-56395 was published Jun 21, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database