Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

99 advisories

Loading
A potential security vulnerability has been identified in the HP Support Assistant for versions... High Unreviewed
CVE-2026-15431 was published Sep 3, 2026
docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace... High Unreviewed
CVE-2026-78122 was published Aug 23, 2026
A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows... High Unreviewed
CVE-2026-40145 was published Aug 17, 2026
The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied... Moderate Unreviewed
CVE-2026-68868 was published Aug 12, 2026
Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized... High Unreviewed
CVE-2026-62721 was published Aug 11, 2026
Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable... Moderate Unreviewed
CVE-2025-31938 was published Aug 11, 2026
A heap-buffer-overflow flaw was found in Directory Server (389-ds-base). When a DN contains a... Moderate Unreviewed
CVE-2026-16560 was published Jul 22, 2026
A flaw was found in the admin REST API of Keycloak, a solution for identity and access management... Moderate Unreviewed
CVE-2026-16106 was published Jul 17, 2026
A flaw was found in the default-groups REST endpoint and realm representation of Keycloak. This... Moderate Unreviewed
CVE-2026-16108 was published Jul 17, 2026
Insufficient granularity of access control in Windows Event Logging Service allows an authorized... High Unreviewed
CVE-2026-50502 was published Jul 14, 2026
Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an... High Unreviewed
CVE-2026-50405 was published Jul 14, 2026
Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows... High Unreviewed
CVE-2026-56155 was published Jul 14, 2026
Insufficient granularity of access control in Microsoft Exchange Server allows an authorized... High Unreviewed
CVE-2026-55006 was published Jul 14, 2026
Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to... High Unreviewed
CVE-2026-48581 was published Jul 14, 2026
A flaw was found in the Fine-Grained Admin Permissions (FGAP) v2 implementation within Keycloak's... Moderate Unreviewed
CVE-2026-14615 was published Jul 3, 2026
A vulnerability was discovered in Keycloak's administrative interface that allows certain... Moderate Unreviewed
CVE-2026-14613 was published Jul 3, 2026
Keycloak: Information disclosure due to user profile permission bypass Low
CVE-2026-9088 was published for org.keycloak:keycloak-services (Maven) Jun 5, 2026
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker... High Unreviewed
CVE-2021-46747 was published Jun 1, 2026
MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled Critical
CVE-2026-2651 was published for mlflow (pip) May 26, 2026
Keycloak Account Resources user lookup contains broken access control Moderate
CVE-2026-37981 was published for org.keycloak:keycloak-services (Maven) May 19, 2026
coffeemakr Credited to coffeemakr
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products... High Unreviewed
CVE-2025-54518 was published May 15, 2026
Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary... High Unreviewed
CVE-2024-21962 was published May 15, 2026
Insufficient granularity of access control in Microsoft Office Click-To-Run allows an authorized... High Unreviewed
CVE-2026-35436 was published May 12, 2026
Insufficient granularity of access control in Microsoft Office SharePoint allows an authorized... High Unreviewed
CVE-2026-40365 was published May 12, 2026
OpenClaw: Agent gateway config mutations could change protected operator settings Moderate
GHSA-7jm2-g593-4qrc was published for openclaw (npm) Apr 25, 2026
zsxsoft Credited to zsxsoft, KeenSecurityLab, and qclawer KeenSecurityLab KeenSecurityLab
qclawer qclawer
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database