Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,187
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,613
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

15,551 advisories

Loading
A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the... Low Unreviewed
CVE-2026-118273 was published Oct 28, 2026
A vulnerability has been found in a2ui-project a2ui up to 0.10.6. Affected by this issue is some... Low Unreviewed
CVE-2026-118274 was published Oct 28, 2026
GROWI contains an authorization bypass vulnerability in its page viewing and commenting... Low Unreviewed
CVE-2026-105272 was published Oct 28, 2026
GROWI contains an authorization bypass vulnerability in its tag update API and the page update... Low Unreviewed
CVE-2026-109848 was published Oct 28, 2026
A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function... Low Unreviewed
CVE-2026-118272 was published Oct 28, 2026
A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. This impacts an... Low Unreviewed
CVE-2026-118271 was published Oct 28, 2026
A vulnerability was found in jeremyckahn Chitchatter up to... Low Unreviewed
CVE-2026-118129 was published Oct 28, 2026
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could... Low Unreviewed
CVE-2026-103995 was published Oct 27, 2026
A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the... Low Unreviewed
CVE-2026-117526 was published Oct 27, 2026
Tanium addressed an infinite loop vulnerability in Threat Response Client Extension. Low Unreviewed
CVE-2026-108331 was published Oct 27, 2026
Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. Low Unreviewed
CVE-2026-108333 was published Oct 27, 2026
Tanium addressed an information disclosure vulnerability in Threat Response Client Extension. Low Unreviewed
CVE-2026-108330 was published Oct 27, 2026
Tanium addressed an insufficient logging vulnerability in Tanium Server. Low Unreviewed
CVE-2026-108311 was published Oct 27, 2026
A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the... Low Unreviewed
CVE-2026-117510 was published Oct 27, 2026
A vulnerability was detected in crownpku Rasa_NLU_Chi up to 0.12.2. Affected is the function... Low Unreviewed
CVE-2026-117509 was published Oct 27, 2026
An attacker can read the name of filesystem paths of your application present via Tidewave... Low Unreviewed
CVE-2026-109823 was published Oct 27, 2026
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release... Low Unreviewed
CVE-2026-90727 was published Oct 27, 2026
An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5... Low Unreviewed
CVE-2026-107590 was published Oct 27, 2026
REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend... Low Unreviewed
CVE-2026-117538 was published Oct 27, 2026
REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability that allows... Low Unreviewed
CVE-2026-117537 was published Oct 27, 2026
REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site scripting vulnerability because... Low Unreviewed
CVE-2026-117533 was published Oct 27, 2026
REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows... Low Unreviewed
CVE-2026-116894 was published Oct 27, 2026
The HTML5 KVM-over-IP console authenticates with a token returned by the web interface.... Low Unreviewed
CVE-2026-18451 was published Oct 27, 2026
The TiendaCrypto para WooCommerce WordPress plugin through 1.2.1 does not correctly verify the... Low Unreviewed
CVE-2026-103325 was published Oct 27, 2026
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to... Low Unreviewed
CVE-2026-116639 was published Oct 27, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database