Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,863
Maven
5,000+
npm
5,000+
NuGet
1,131
pip
5,000+
Pub
13
RubyGems
1,158
Rust
1,586
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20

202 advisories

Loading
A flaw has been found in formtools.org Form Tools up to 3.1.1. Impacted is the function... Low Unreviewed
CVE-2026-103542 was published Oct 1, 2026
Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check... Low Unreviewed
CVE-2026-102877 was published Sep 29, 2026
A security flaw has been discovered in MODSetter SurfSense up to 0.0.36. Impacted is an unknown... Low Unreviewed
CVE-2026-102244 was published Sep 29, 2026
A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0... Low Unreviewed
CVE-2026-100900 was published Sep 28, 2026
utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery... Low Unreviewed
CVE-2026-101061 was published Sep 27, 2026
A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element... Low Unreviewed
CVE-2026-97320 was published Sep 24, 2026
Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module Low
CVE-2026-57232 was published for contao/contao (Composer) Sep 24, 2026
Para213 Credited to Para213
A vulnerability was found in 0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d.... Low Unreviewed
CVE-2026-94051 was published Sep 20, 2026
A weakness has been identified in mealie-recipes Mealie up to 3.25.1. Affected is the function... Low Unreviewed
CVE-2026-94028 was published Sep 20, 2026
Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52... Low Unreviewed
CVE-2026-93384 was published Sep 17, 2026
A vulnerability has been found in chatwoot up to 4.17.1. This impacts an unknown function of the... Low Unreviewed
CVE-2026-92527 was published Sep 16, 2026
Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Server-Side Request Forgery iremote file import via... Low Unreviewed
CVE-2026-18424 was published Sep 15, 2026
A security flaw has been discovered in netease-youdao LobsterAI 2026.6.15/2026.8.28/2026.9.3/2026... Low Unreviewed
CVE-2026-90818 was published Sep 14, 2026
A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this... Low Unreviewed
CVE-2026-90814 was published Sep 14, 2026
A vulnerability was found in FlowiseAI Flowise up to 3.0.2. This vulnerability affects the... Low Unreviewed
CVE-2026-90580 was published Sep 13, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker... Low Unreviewed
CVE-2026-69904 was published Sep 8, 2026
Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher Low
CVE-2026-73087 was published for github.com/amir20/dozzle (Go) Sep 8, 2026
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via... Low Unreviewed
CVE-2026-86503 was published Sep 7, 2026
A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. This affects the function... Low Unreviewed
CVE-2026-86240 was published Sep 7, 2026
A security vulnerability has been detected in invoiceninja Invoice Ninja up to 5.13.26. This... Low Unreviewed
CVE-2026-83744 was published Sep 1, 2026
A vulnerability was detected in sdcb chats up to 1.12.0. This affects the function McpController... Low Unreviewed
CVE-2026-82905 was published Aug 31, 2026
A vulnerability has been found in yaojingang GEOFlow up to 2.1.0. Impacted is the function... Low Unreviewed
CVE-2026-82667 was published Aug 31, 2026
A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP... Low Unreviewed
CVE-2026-82556 was published Aug 30, 2026
Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud... Low Unreviewed
CVE-2026-59291 was published Aug 27, 2026
HCL Connections is vulnerable to server-side request forgery (SSRF) when an internal server is... Low Unreviewed
CVE-2025-62341 was published Aug 27, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database