Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,739
Maven
5,000+
npm
5,000+
NuGet
1,116
pip
5,000+
Pub
13
RubyGems
1,152
Rust
1,570
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

869 advisories

Loading
Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure... Critical Unreviewed
CVE-2026-81046 was published Sep 10, 2026
Capgo (capgo.app) fails to restrict direct write access to the public.sso_providers table exposed... Critical Unreviewed
CVE-2026-88864 was published Sep 10, 2026
Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0... Critical Unreviewed
CVE-2026-79571 was published Sep 8, 2026
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,... Critical Unreviewed
CVE-2026-26084 was published Sep 8, 2026
An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352E_DMO allows a remote attacker to... Critical Unreviewed
CVE-2026-78745 was published Sep 4, 2026
Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the... Critical Unreviewed
CVE-2026-54213 was published Aug 7, 2026
IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator... Critical Unreviewed
CVE-2026-19274 was published Sep 4, 2026
Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51767 was published Sep 1, 2026
Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51754 was published Sep 1, 2026
Incorrect access control in the meshInfoKick function of TOTOLINK T6 4.1.5cu.748_B20211015 allows... Critical Unreviewed
CVE-2026-51762 was published Sep 1, 2026
Incorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51741 was published Sep 1, 2026
Incorrect access control in the keepAlive function of TOTOLINK T6 4.1.5cu.748_B20211015 allows... Critical Unreviewed
CVE-2026-51747 was published Sep 1, 2026
Incorrect access control in the setWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51686 was published Aug 31, 2026
A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a... Critical Unreviewed
CVE-2026-66788 was published Aug 20, 2026
A flaw was found in the submariner-operator component. The `submariner-k8s-broker-cluster` Role,... Critical Unreviewed
CVE-2026-66780 was published Aug 18, 2026
Incorrect access control in the setWiFiMeshName function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51705 was published Aug 31, 2026
Incorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51750 was published Sep 1, 2026
Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51757 was published Sep 1, 2026
Incorrect access control in the recvSlaveCloudCheckStatus function of TOTOLINK T6 4.1.5cu... Critical Unreviewed
CVE-2026-51764 was published Sep 1, 2026
Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access... Critical Unreviewed
CVE-2026-37072 was published Aug 27, 2026
Incorrect access control in the remoteCloudUpdateCheck function of TOTOLINK T6 4.1.5cu... Critical Unreviewed
CVE-2026-51769 was published Sep 1, 2026
Incorrect access control in the startSlaveReboot function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51611 was published Aug 28, 2026
An issue in fast-note-sync-service <=2.13.7 allows a remote attacker to escalate privileges via... Critical Unreviewed
CVE-2026-52111 was published Sep 1, 2026
Incorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51738 was published Aug 31, 2026
Incorrect access control in the UploadFirmwareFile function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51728 was published Aug 31, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database