Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,875
Maven
5,000+
npm
5,000+
NuGet
1,131
pip
5,000+
Pub
13
RubyGems
1,159
Rust
1,590
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,306 advisories

Loading
OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers... Moderate Unreviewed
CVE-2026-105122 was published Oct 3, 2026
UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows... Moderate Unreviewed
CVE-2026-82044 was published Oct 2, 2026
UTMStack before 11.2.16 contains a server-side request forgery vulnerability in... Moderate Unreviewed
CVE-2026-82040 was published Oct 2, 2026
Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote... High Unreviewed
CVE-2020-37278 was published Oct 2, 2026
Server-Side Request Forgery (SSRF) vulnerability in ThemeREX Group ThemeREX Addons trx_addons... Moderate Unreviewed
CVE-2026-102797 was published Oct 2, 2026
YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows... High Unreviewed
CVE-2026-104463 was published Oct 2, 2026
YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows... High Unreviewed
CVE-2026-104464 was published Oct 2, 2026
YesWiki before 4.6.7 contains a server-side request forgery vulnerability in validateKeyIdUrl()... High Unreviewed
CVE-2026-104458 was published Oct 2, 2026
YesWiki before 4.6.7 contains a server-side request forgery vulnerability in WebfingerService... Moderate Unreviewed
CVE-2026-104459 was published Oct 2, 2026
YesWiki before 4.6.7 contains a blind server-side request forgery vulnerability that allows... Moderate Unreviewed
CVE-2026-104440 was published Oct 2, 2026
YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that... Moderate Unreviewed
CVE-2026-104442 was published Oct 2, 2026
YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that... Moderate Unreviewed
CVE-2026-104441 was published Oct 2, 2026
Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform... Moderate Unreviewed
CVE-2026-80464 was published Oct 2, 2026
A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp... Moderate Unreviewed
CVE-2026-104120 was published Oct 2, 2026
Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not... Moderate Unreviewed
CVE-2026-100251 was published Oct 1, 2026
Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table... High Unreviewed
CVE-2026-103757 was published Oct 1, 2026
Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in... Moderate Unreviewed
CVE-2026-103291 was published Oct 1, 2026
Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the... Moderate Unreviewed
CVE-2026-103287 was published Oct 1, 2026
Server-Side Request Forgery (SSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor... High Unreviewed
CVE-2026-103082 was published Oct 1, 2026
In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration Moderate Unreviewed
CVE-2026-103497 was published Oct 1, 2026
A flaw has been found in formtools.org Form Tools up to 3.1.1. Impacted is the function... Low Unreviewed
CVE-2026-103542 was published Oct 1, 2026
A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the... Moderate Unreviewed
CVE-2026-103530 was published Oct 1, 2026
iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that... High Unreviewed
CVE-2023-54402 was published Sep 30, 2026
OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in... Moderate Unreviewed
CVE-2026-101883 was published Sep 30, 2026
In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials Moderate Unreviewed
CVE-2026-100279 was published Sep 30, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database