Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,683
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,532
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,014 advisories

Loading
Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could... Critical Unreviewed
CVE-2026-76657 was published Sep 1, 2026
A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that... Critical Unreviewed
CVE-2026-76658 was published Sep 1, 2026
An authentication bypass vulnerability exists in the underlying operating system of HPE... Critical Unreviewed
CVE-2026-19766 was published Sep 1, 2026
A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of... Critical Unreviewed
CVE-2026-82695 was published Aug 31, 2026
A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function... Critical Unreviewed
CVE-2026-82694 was published Aug 31, 2026
A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the... Critical Unreviewed
CVE-2026-82693 was published Aug 31, 2026
Attackers can exploit command injection vulnerabilities to delete core system runtime files,... Critical Unreviewed
CVE-2026-49003 was published Aug 31, 2026
Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route... Critical Unreviewed
CVE-2026-82466 was published Aug 29, 2026
JFrog Artifactory contains an authentication weakness that, under default configuration, may... Critical Unreviewed
CVE-2026-82329 was published Aug 28, 2026
A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an... Critical Unreviewed
CVE-2026-37006 was published Aug 27, 2026
DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '... Critical Unreviewed
CVE-2026-75325 was published Aug 26, 2026
Alluxio's S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default... Critical Unreviewed
CVE-2026-79787 was published Aug 25, 2026
A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the... Critical Unreviewed
CVE-2026-78167 was published Aug 24, 2026
The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was... Critical Unreviewed
CVE-2026-77000 was published Aug 22, 2026
The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side... Critical Unreviewed
CVE-2026-77002 was published Aug 22, 2026
The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does... Critical Unreviewed
CVE-2026-77001 was published Aug 22, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary... Critical Unreviewed
CVE-2026-17142 was published Aug 21, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure... Critical Unreviewed
CVE-2026-20317 was published Aug 19, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root... Critical Unreviewed
CVE-2026-16656 was published Aug 19, 2026
The TabaPay Gateway WordPress plugin through 1.4.0 does not validate the payment callback before... Critical Unreviewed
CVE-2026-18031 was published Aug 19, 2026
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Agent... Critical Unreviewed
CVE-2026-70905 was published Aug 18, 2026
openssl_encrypt before 1.4.0 contains an authentication bypass vulnerability in the... Critical Unreviewed
CVE-2026-74894 was published Aug 17, 2026
A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function... Critical Unreviewed
CVE-2026-19977 was published Aug 17, 2026
The Simple JWT Login WordPress plugin before 3.6.8 does not validate the audience of the Google... Critical Unreviewed
CVE-2026-19714 was published Aug 16, 2026
The 6Storage Rentals plugin for WordPress is vulnerable to authentication bypass in versions up... Critical Unreviewed
CVE-2026-15303 was published Aug 15, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database