Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,636
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,529
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

29,840 advisories

Loading
Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu... Critical Unreviewed
CVE-2026-51765 was published Sep 1, 2026
Incorrect access control in the recvSlaveCloudCheckStatus function of TOTOLINK T6 4.1.5cu... Critical Unreviewed
CVE-2026-51764 was published Sep 1, 2026
Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51757 was published Sep 1, 2026
Incorrect access control in the freeStaClient function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51763 was published Sep 1, 2026
Improper neutralization of special elements used in an SQL command ('SQL injection')... Critical Unreviewed
CVE-2026-18210 was published Sep 1, 2026
Improper Control of Generation of Code ('Code Injection') vulnerability in Klemsan Electrical... Critical Unreviewed
CVE-2026-18808 was published Sep 1, 2026
This vulnerability exists in the ERP system due to improper authentication and authorization... Critical Unreviewed
CVE-2026-84148 was published Sep 1, 2026
This vulnerability exists in the ERP system due to improper authentication controls and... Critical Unreviewed
CVE-2026-84147 was published Sep 1, 2026
This vulnerability exists in the ERP system due to exposure of repository information through a... Critical Unreviewed
CVE-2026-84149 was published Sep 1, 2026
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox... Critical Unreviewed
CVE-2026-84129 was published Sep 1, 2026
Incorrect access control in the guest_wifi_sync function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51743 was published Sep 1, 2026
Incorrect access control in the recv_mesh_info_sync function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51744 was published Sep 1, 2026
Improper neutralization of special elements used in an SQL command ('SQL injection')... Critical Unreviewed
CVE-2026-18765 was published Sep 1, 2026
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was... Critical Unreviewed
CVE-2026-84119 was published Sep 1, 2026
Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed... Critical Unreviewed
CVE-2026-84121 was published Sep 1, 2026
Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy... Critical Unreviewed
CVE-2026-84200 was published Sep 1, 2026
The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via... Critical Unreviewed
CVE-2026-18550 was published Sep 1, 2026
LibreNMS through 26.4.0 renders JSON fields (name, ip, model, author, commit message) returned by... Critical Unreviewed
CVE-2026-84189 was published Sep 1, 2026
Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites ... Critical Unreviewed
CVE-2023-54356 was published Sep 1, 2026
A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows... Critical Unreviewed
CVE-2026-4813 was published Sep 1, 2026
A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU... Critical Unreviewed
CVE-2026-78319 was published Sep 1, 2026
The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode... Critical Unreviewed
CVE-2026-75865 was published Sep 1, 2026
A critical local privilege escalation via OS command injection vulnerability has been discovered... Critical Unreviewed
CVE-2026-67394 was published Sep 1, 2026
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown... Critical Unreviewed
CVE-2026-82971 was published Sep 1, 2026
Unauthenticated PHP Object Injection in Tickera <= 3.6.0.2 versions. Critical Unreviewed
CVE-2026-82226 was published Aug 31, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database