Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

203 advisories

Loading
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... High Unreviewed
CVE-2026-80130 was published Sep 7, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... High Unreviewed
CVE-2026-80133 was published Sep 7, 2026
A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components()... High Unreviewed
CVE-2026-14476 was published Jul 7, 2026
Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass High
CVE-2026-63490 was published for com.github.jknack:handlebars-springmvc (Maven) Sep 2, 2026
hypnguyen1209 Credited to hypnguyen1209
Siyuan: Authenticated path traversal in /snippets/ static handler (serveSnippets) leaks conf/conf.json secrets and siyuan.db High
CVE-2026-59832 was published for github.com/siyuan-note/siyuan/kernel (Go) Sep 2, 2026
Apache Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result High
CVE-2026-66907 was published for org.apache.camel:camel-google-storage (Maven) Aug 24, 2026
oscerd Credited to oscerd
Snipe-IT vulnerable to directory traversal in displaySig High
CVE-2026-55474 was published for snipe/snipe-it (Composer) Aug 28, 2026
Relative Path Traversal vulnerability in Apache InLong. Arbitrary file read from the Agent host... High Unreviewed
CVE-2026-63043 was published Aug 20, 2026
4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability... High Unreviewed
CVE-2026-78212 was published Aug 24, 2026
Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana... High Unreviewed
CVE-2026-72677 was published Aug 13, 2026
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute... High Unreviewed
CVE-2026-70337 was published Aug 11, 2026
Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges... High Unreviewed
CVE-2026-65810 was published Aug 11, 2026
Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct... High Unreviewed
CVE-2026-53416 was published Aug 11, 2026
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected... High Unreviewed
CVE-2026-16053 was published Aug 11, 2026
A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA... High Unreviewed
CVE-2026-10595 was published Aug 9, 2026
Path traversal in Ivanti  Xtraction before version 2026.2.1 allows a remote authenticated... High Unreviewed
CVE-2026-14903 was published Jul 14, 2026
Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows... High Unreviewed
CVE-2026-18907 was published Aug 5, 2026
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files High
CVE-2026-54910 was published for github.com/gtsteffaniak/filebrowser/backend (Go) Jul 31, 2026
je-lv Credited to je-lv
hashi-vault-js has a path traversal and query parameter injection High
CVE-2026-55100 was published for hashi-vault-js (npm) Jul 31, 2026
Sebasteuo Credited to Sebasteuo
VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing... High Unreviewed
CVE-2026-18192 was published Jul 29, 2026
The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to... High Unreviewed
CVE-2026-15802 was published Jul 22, 2026
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code... High Unreviewed
CVE-2026-56196 was published Jul 14, 2026
Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate... High Unreviewed
CVE-2026-50454 was published Jul 14, 2026
Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized... High Unreviewed
CVE-2026-50663 was published Jul 14, 2026
Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over... High Unreviewed
CVE-2026-40400 was published Jul 14, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database