Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,347
Maven
5,000+
npm
5,000+
NuGet
1,042
pip
5,000+
Pub
13
RubyGems
1,122
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

27,501 advisories

Loading
AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps... Critical Unreviewed
CVE-2026-64625 was published Jul 21, 2026
A path traversal vulnerability was found in pulpcore. The relative_path_validator function only... Critical Unreviewed
CVE-2026-12701 was published Jul 20, 2026
django-pyas2 through 1.2.3 is vulnerable to OS command injection via the cmd_receive and cmd_send... Critical Unreviewed
CVE-2026-42168 was published Jul 17, 2026
An issue in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via the... Critical Unreviewed
CVE-2026-51027 was published Jul 20, 2026
Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These... Critical Unreviewed
CVE-2026-16235 was published Jul 20, 2026
An issue was discovered in openRISC OR1200 commit 83ac6b. An output mismatch between the RTL and... Critical Unreviewed
CVE-2025-51677 was published Jul 17, 2026
An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute... Critical Unreviewed
CVE-2026-52199 was published Jul 17, 2026
The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated... Critical Unreviewed
CVE-2026-60024 was published Jul 17, 2026
An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3... Critical Unreviewed
CVE-2026-36669 was published Jul 17, 2026
GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where... Critical Unreviewed
CVE-2026-63766 was published Jul 20, 2026
VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP... Critical Unreviewed
CVE-2026-13380 was published Jul 20, 2026
The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full... Critical Unreviewed
CVE-2026-61900 was published Jul 20, 2026
The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full... Critical Unreviewed
CVE-2026-61425 was published Jul 20, 2026
The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to... Critical Unreviewed
CVE-2026-61424 was published Jul 20, 2026
The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsanitised SVG uploads... Critical Unreviewed
CVE-2026-60034 was published Jul 20, 2026
The Joomla extension JMedia is vulnerable to an authenticated arbitrary file upload, leading to... Critical Unreviewed
CVE-2026-60032 was published Jul 20, 2026
ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle... Critical Unreviewed
CVE-2026-63767 was published Jul 20, 2026
Improper authorization in the ToolGroupResource and RoleAjax REST/DWR endpoints in dotCMS dotCMS... Critical Unreviewed
CVE-2026-16337 was published Jul 20, 2026
cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() method of CrudOption.java. Critical Unreviewed
CVE-2026-52348 was published Jul 17, 2026
IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication... Critical Unreviewed
CVE-2026-8505 was published Jul 17, 2026
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU... Critical Unreviewed
CVE-2026-64102 was published Jul 19, 2026
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject... Critical Unreviewed
CVE-2026-64106 was published Jul 19, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner:... Critical Unreviewed
CVE-2026-64150 was published Jul 19, 2026
In the Linux kernel, the following vulnerability has been resolved: idpf: fix read_dev_clk_lock... Critical Unreviewed
CVE-2026-64162 was published Jul 19, 2026
In the Linux kernel, the following vulnerability has been resolved: ksmbd: close durable... Critical Unreviewed
CVE-2026-64142 was published Jul 19, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database