GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,340
Maven
5,000+
npm
5,000+
NuGet
1,033
pip
5,000+
Pub
13
RubyGems
1,122
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
149,607 advisories
Filter by severity
A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an...
Moderate
Unreviewed
CVE-2026-16224
was published
Jul 19, 2026
A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This affects the...
Moderate
Unreviewed
CVE-2026-16226
was published
Jul 19, 2026
A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this...
Moderate
Unreviewed
CVE-2026-16213
was published
Jul 19, 2026
A security flaw has been discovered in geex-arts django-jet up to 1.0.8. This impacts an unknown...
Moderate
Unreviewed
CVE-2026-16215
was published
Jul 19, 2026
A vulnerability was found in newpanjing simpleui 2026.01.13. This affects the function self...
Moderate
Unreviewed
CVE-2026-16210
was published
Jul 19, 2026
A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown...
Moderate
Unreviewed
CVE-2026-16209
was published
Jul 19, 2026
A vulnerability was detected in django-tastypie up to 0.15.1. Impacted is the function...
Moderate
Unreviewed
CVE-2026-16207
was published
Jul 19, 2026
A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue...
Moderate
Unreviewed
CVE-2026-16206
was published
Jul 19, 2026
A vulnerability was found in zevorn rt-claw up to 0.2.0. Affected is the function claw_net_get...
Moderate
Unreviewed
CVE-2026-16201
was published
Jul 19, 2026
A vulnerability has been found in zevorn rt-claw up to 0.2.0. This impacts the function...
Moderate
Unreviewed
CVE-2026-16200
was published
Jul 19, 2026
The Flow Payment plugin for WordPress (flow.cl) version 3.0.8 is vulnerable to reflected cross...
Moderate
Unreviewed
CVE-2026-57857
was published
Jul 18, 2026
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php....
Moderate
Unreviewed
CVE-2026-16154
was published
Jul 18, 2026
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an...
Moderate
Unreviewed
CVE-2026-16152
was published
Jul 18, 2026
Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component (reachable to...
Moderate
Unreviewed
CVE-2026-57848
was published
Jul 18, 2026
A vulnerability has been found in CartoDB carto-api-client 0.5.29. This impacts the function...
Moderate
Unreviewed
CVE-2026-16151
was published
Jul 18, 2026
A vulnerability was found in RobinHerbots Inputmask up to 5.0.9. Affected by this issue is the...
Moderate
Unreviewed
CVE-2026-16150
was published
Jul 18, 2026
A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This impacts the function...
Moderate
Unreviewed
CVE-2026-16128
was published
Jul 18, 2026
A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the function...
Moderate
Unreviewed
CVE-2026-16125
was published
Jul 18, 2026
A vulnerability was determined in zevorn rt-claw up to 0.2.0. The impacted element is the...
Moderate
Unreviewed
CVE-2026-16126
was published
Jul 18, 2026
A vulnerability was identified in zevorn rt-claw up to 0.2.0. This affects the function...
Moderate
Unreviewed
CVE-2026-16127
was published
Jul 18, 2026
SurrealDB before 2.2.2 with scripting enabled fails to properly enforce recursion limits when...
Moderate
Unreviewed
CVE-2025-71393
was published
Jul 18, 2026
SurrealDB before 2.2.6, 2.3.6, and 2.1.8 (and 3.0.0-alpha.7 and earlier) fails to validate DNS...
Moderate
Unreviewed
CVE-2025-71390
was published
Jul 18, 2026
SurrealDB before 2.2.2 fails to validate HTTP redirects in http functions, allowing authenticated...
Moderate
Unreviewed
CVE-2025-71398
was published
Jul 18, 2026
SurrealDB before 1.5.4 fails to properly validate authentication when a scope user switches...
Moderate
Unreviewed
CVE-2024-58363
was published
Jul 18, 2026
SurrealDB versions before 2.1.0 contain a denial of service vulnerability in role conversion that...
Moderate
Unreviewed
CVE-2024-58358
was published
Jul 18, 2026
ProTip!
Advisories are also available from the
GraphQL API