Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
101
GitHub Actions
54
Go
4,295
Maven
5,000+
npm
5,000+
NuGet
1,029
pip
5,000+
Pub
13
RubyGems
1,107
Rust
1,492
Swift
61
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

231 advisories

Loading
Microsoft Edge (Chromium-based) Spoofing Vulnerability Moderate Unreviewed
CVE-2026-45489 was published Jul 3, 2026
PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing... Moderate Unreviewed
CVE-2026-61428 was published Jul 11, 2026
n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks... Moderate Unreviewed
CVE-2026-56360 was published Jul 8, 2026
Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.46 allowed a remote... Moderate Unreviewed
CVE-2026-14381 was published Jul 2, 2026
Inappropriate implementation in MediaCapture in Google Chrome prior to 150.0.7871.47 allowed a... Moderate Unreviewed
CVE-2026-13985 was published Jul 1, 2026
Incorrect security UI in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote... Moderate Unreviewed
CVE-2026-13984 was published Jul 1, 2026
Insufficient data validation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote... Moderate Unreviewed
CVE-2026-14118 was published Jul 1, 2026
Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS,... Moderate Unreviewed
CVE-2026-52690 was published Jun 25, 2026
Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions. Moderate Unreviewed
CVE-2026-42662 was published Jun 15, 2026
The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP restriction... Moderate Unreviewed
CVE-2026-34025 was published Jun 15, 2026
Authentication bypass by spoofing vulnerability in Hedef Media Promotion Interactive Media... Moderate Unreviewed
CVE-2026-5792 was published Jun 12, 2026
Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53... Moderate Unreviewed
CVE-2026-11019 was published Jun 5, 2026
Inappropriate implementation in Payments in Google Chrome prior to 149.0.7827.53 allowed a remote... Moderate Unreviewed
CVE-2026-11001 was published Jun 5, 2026
Spoofing issue in the Form Autofill component. This vulnerability was fixed in Firefox 151 and... Moderate Unreviewed
CVE-2026-8961 was published May 19, 2026
Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in... Moderate Unreviewed
CVE-2026-8951 was published May 19, 2026
When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker... Moderate Unreviewed
CVE-2026-40460 was published May 13, 2026
An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a... Moderate Unreviewed
CVE-2024-34397 was published May 7, 2024
Logic vulnerability in TP-Link Archer C20 v6.0 and Archer AX53 v1.0 (TDDP module) allows... Moderate Unreviewed
CVE-2026-0834 was published Jan 21, 2026
wpDiscuz before 7.6.47 contains a vote manipulation vulnerability that allows attackers to... Moderate Unreviewed
CVE-2026-22199 was published Mar 13, 2026
Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150,... Moderate Unreviewed
CVE-2026-6762 was published Apr 21, 2026
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability Moderate Unreviewed
CVE-2026-0385 was published Mar 16, 2026
This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. A... Moderate Unreviewed
CVE-2024-27853 was published Jul 30, 2024
Authentication Bypass by Spoofing vulnerability in Wpmet Wp Ultimate Review allows Functionality... Moderate Unreviewed
CVE-2024-21746 was published May 17, 2024
Authentication Bypass by Spoofing vulnerability in Patreon Patreon WordPress allows Functionality... Moderate Unreviewed
CVE-2024-37430 was published Jul 9, 2024
Authentication Bypass by Spoofing vulnerability in Joe Dolson My Tickets my-tickets allows... Moderate Unreviewed
CVE-2026-32492 was published Mar 25, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database