Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,683
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,532
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

355 advisories

Loading
Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute... High Unreviewed
CVE-2026-85045 was published Sep 3, 2026
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise... High Unreviewed
CVE-2026-19118 was published Sep 2, 2026
Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit... High Unreviewed
CVE-2026-78422 was published Aug 31, 2026
Crossplane's TOCTOU between cosign verification and image fetch in xpkg.CachedClient allows tag-based package install to bypass signature check High
GHSA-mf7q-r4rv-jv94 was published for github.com/crossplane/crossplane-runtime/v2 (Go) Aug 27, 2026
tonghuaroot Credited to tonghuaroot and bugbunny-research bugbunny-research bugbunny-research
Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to... High Unreviewed
CVE-2026-79263 was published Aug 25, 2026
Race condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker... High Unreviewed
CVE-2026-79155 was published Aug 25, 2026
Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local... High Unreviewed
CVE-2026-79057 was published Aug 25, 2026
Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had... High Unreviewed
CVE-2026-79071 was published Aug 25, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating... High Unreviewed
CVE-2026-65183 was published Aug 26, 2026
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the... High Unreviewed
CVE-2015-3246 was published May 14, 2022
OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion High
CVE-2026-53831 was published for openclaw (npm) Jul 2, 2026
cantinagen Credited to cantinagen and Ellahinator Ellahinator Ellahinator
Duplicate Advisory: OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion High
GHSA-gwcq-453v-2frr was published for openclaw (npm) Jun 13, 2026 • withdrawn
In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor... High Unreviewed
CVE-2026-46227 was published May 28, 2026
PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114 High
CVE-2026-55537 was published for PraisonAI (pip) Aug 25, 2026
evertrustai Credited to evertrustai
praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap) High
CVE-2026-55524 was published for praisonaiagents (pip) Aug 25, 2026
sour-exploit Credited to sour-exploit
Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to... High Unreviewed
CVE-2026-76020 was published Aug 20, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated... High Unreviewed
CVE-2026-16935 was published Aug 21, 2026
During execve(2) of a SUID binary, the new virtual address space is installed before the process... High Unreviewed
CVE-2026-49415 was published Aug 19, 2026
Apache CXF OAuth2 TOCTOU Race Condition in Refresh Token Processing High
CVE-2026-50631 was published for org.apache.cxf:cxf-rt-rs-security-oauth2 (Maven) Jun 12, 2026
In the Linux kernel, the following vulnerability has been resolved: sched/psi: fix race between... High Unreviewed
CVE-2026-52991 was published Jun 24, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root... High Unreviewed
CVE-2026-16927 was published Aug 20, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary... High Unreviewed
CVE-2026-16922 was published Aug 20, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical... High Unreviewed
CVE-2026-16838 was published Aug 19, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of... High Unreviewed
CVE-2026-16819 was published Aug 19, 2026
Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of... High Unreviewed
CVE-2024-13942 was published Aug 19, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database