Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

154,672 advisories

Loading
The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the... Moderate Unreviewed
CVE-2026-17084 was published Aug 18, 2026
Camaleon CMS versions 2.7.5 through 2.9.1 fail to validate redirect targets when fetching remote... Moderate Unreviewed
CVE-2026-86100 was published Sep 5, 2026
PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration:... Moderate Unreviewed
CVE-2026-86096 was published Sep 5, 2026
A flaw was found in Flatpak. A Time-of-check to time-of-use (TOCTOU) race condition exists in the... Moderate Unreviewed
CVE-2026-76925 was published Sep 5, 2026
In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor... Moderate Unreviewed
CVE-2026-47848 was published Aug 26, 2026
A security vulnerability has been detected in ramon-victor freegpt-webui up to... Moderate Unreviewed
CVE-2026-85702 was published Sep 4, 2026
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and... Moderate Unreviewed
CVE-2026-80115 was published Sep 4, 2026
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and... Moderate Unreviewed
CVE-2026-80117 was published Sep 4, 2026
A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the... Moderate Unreviewed
CVE-2026-85637 was published Sep 4, 2026
A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core... Moderate Unreviewed
CVE-2026-85638 was published Sep 4, 2026
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and... Moderate Unreviewed
CVE-2026-80113 was published Sep 4, 2026
A vulnerability has been found in ramon-victor freegpt-webui up to... Moderate Unreviewed
CVE-2026-85701 was published Sep 4, 2026
A flaw has been found in ramon-victor freegpt-webui up to... Moderate Unreviewed
CVE-2026-85703 was published Sep 4, 2026
An arbitrary file read vulnerability in /cgi-bin/ugwdownload.cgi of MBS-Solutions X-Serie Gateway... Moderate Unreviewed
CVE-2026-75164 was published Sep 4, 2026
The ePayco Payment Gateway for WooCommerce WordPress plugin before 8.4.7 does not properly verify... Moderate Unreviewed
CVE-2026-84043 was published Sep 4, 2026
Stored XSS via markdown HTML processing in Apache Allura. This issue affects Apache Allura:... Moderate Unreviewed
CVE-2026-80180 was published Sep 4, 2026
Apache Allura: stored XSS via SVN code repositories.  Git repositories are not known to be... Moderate Unreviewed
CVE-2026-80190 was published Sep 4, 2026
Jenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the... Moderate Unreviewed
CVE-2026-84666 was published Sep 2, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login... Moderate Unreviewed
CVE-2026-16647 was published Sep 2, 2026
Applications using AesBytesEncryptor with the two-argument constructor or when passing a null IV... Moderate Unreviewed
CVE-2026-47842 was published Aug 26, 2026
CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure... Moderate Unreviewed
CVE-2026-55401 was published Aug 13, 2026
CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57.... Moderate Unreviewed
CVE-2026-55400 was published Aug 13, 2026
Flowise before 3.1.4 fails to validate chatflow visibility in the unauthenticated text-to-speech... Moderate Unreviewed
CVE-2026-73603 was published Aug 13, 2026
GFI Exinda AI before 7.6.5 contains a path traversal vulnerability in the system maintenance... Moderate Unreviewed
CVE-2026-74235 was published Sep 4, 2026
Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An... Moderate Unreviewed
CVE-2026-75619 was published Aug 19, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database