Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,875
Maven
5,000+
npm
5,000+
NuGet
1,131
pip
5,000+
Pub
13
RubyGems
1,159
Rust
1,590
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

296 advisories

Loading
A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `... Critical Unreviewed
CVE-2026-75885 was published Sep 19, 2026
A flaw was found in the `guardrails-detectors` component. This vulnerability allows a remote... Critical Unreviewed
CVE-2026-15378 was published Jul 10, 2026
mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF)... Critical Unreviewed
CVE-2026-51994 was published Sep 24, 2026
CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery (SSRF) in core/modules/media.php --... Critical Unreviewed
CVE-2026-36469 was published Sep 21, 2026
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain... Critical Unreviewed
CVE-2026-81549 was published Sep 24, 2026
A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth()... Critical Unreviewed
CVE-2026-12564 was published Aug 18, 2026
Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF)... Critical Unreviewed
CVE-2026-82000 was published Sep 22, 2026
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability... Critical Unreviewed
CVE-2026-82443 was published Sep 22, 2026
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability... Critical Unreviewed
CVE-2026-83660 was published Sep 22, 2026
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability... Critical Unreviewed
CVE-2026-82013 was published Sep 22, 2026
HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability... Critical Unreviewed
CVE-2026-67101 was published Sep 18, 2026
Server-Side Request Forgery / Local File Inclusion in Apache MyFace Core. Older unsupported... Critical Unreviewed
CVE-2026-68536 was published Sep 16, 2026
A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1... Critical Unreviewed
CVE-2025-56563 was published Sep 16, 2026
HKUDS nanobot before 0.3.0 contains a server-side request forgery vulnerability in the... Critical Unreviewed
CVE-2026-92576 was published Sep 17, 2026
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with... Critical Unreviewed
CVE-2026-12944 was published Sep 15, 2026
Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote... Critical Unreviewed
CVE-2026-87595 was published Sep 9, 2026
Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue... Critical Unreviewed
CVE-2026-80181 was published Sep 4, 2026
A flaw was found in the `cluster-proxy-addon` component of Multicluster Engine for Kubernetes.... Critical Unreviewed
CVE-2026-66794 was published Aug 19, 2026
SQL Chat contains four unauthenticated API endpoints that accept client-supplied database... Critical Unreviewed
CVE-2026-86123 was published Sep 5, 2026
Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability... Critical Unreviewed
CVE-2026-86119 was published Sep 5, 2026
OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in... Critical Unreviewed
CVE-2026-85614 was published Sep 4, 2026
Server-side request forgery (SSRF) in the /har/test endpoint in QD 20220208 through 20250803.... Critical Unreviewed
CVE-2026-51152 was published Aug 31, 2026
The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate... Critical Unreviewed
CVE-2026-16947 was published Aug 29, 2026
The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of... Critical Unreviewed
CVE-2026-77012 was published Aug 29, 2026
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability... Critical Unreviewed
CVE-2026-76193 was published Aug 25, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database