Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,584
Rust
21

1,330 advisories

Loading
Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions. High Unreviewed
CVE-2026-62094 was published Oct 10, 2026
Unauthenticated Local File Inclusion in Kaven <= 1.2 versions. High Unreviewed
CVE-2026-62067 was published Oct 10, 2026
Unauthenticated Local File Inclusion in Volos <= 1.2 versions. High Unreviewed
CVE-2026-62066 was published Oct 10, 2026
Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions. High Unreviewed
CVE-2026-62074 was published Oct 10, 2026
Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions. High Unreviewed
CVE-2026-62096 was published Oct 10, 2026
Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions. High Unreviewed
CVE-2026-62115 was published Oct 10, 2026
Unauthenticated Local File Inclusion in TouchUp < 1.4 versions. High Unreviewed
CVE-2026-62020 was published Oct 10, 2026
Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions. Critical Unreviewed
CVE-2026-62032 was published Oct 10, 2026
Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions. High Unreviewed
CVE-2026-48193 was published Oct 10, 2026
Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions. High Unreviewed
CVE-2026-42724 was published Oct 10, 2026
Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions. High Unreviewed
CVE-2026-48194 was published Oct 10, 2026
Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions. High Unreviewed
CVE-2026-42704 was published Oct 10, 2026
Unauthenticated Local File Inclusion in Aalto <= 1.8 versions. High Unreviewed
CVE-2026-42777 was published Oct 10, 2026
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for... High Unreviewed
CVE-2026-104899 was published Oct 10, 2026
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... High Unreviewed
CVE-2026-94067 was published Oct 9, 2026
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... High Unreviewed
CVE-2026-94062 was published Oct 9, 2026
The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is... High Unreviewed
CVE-2026-75028 was published Oct 3, 2026
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all... High Unreviewed
CVE-2026-92174 was published Oct 2, 2026
Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions. High Unreviewed
CVE-2026-96837 was published Sep 30, 2026
The Simply Schedule Appointments plugin for WordPress is vulnerable to Local File Inclusion in... High Unreviewed
CVE-2026-89294 was published Sep 30, 2026
The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin... High Unreviewed
CVE-2026-13456 was published Sep 25, 2026
The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in... Critical Unreviewed
CVE-2026-12227 was published Sep 24, 2026
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is... High Unreviewed
CVE-2026-9231 was published Sep 22, 2026
The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to... High Unreviewed
CVE-2026-92969 was published Sep 22, 2026
The All Bootstrap Blocks WordPress plugin through 1.3.31 does not validate a block attribute... Moderate Unreviewed
CVE-2026-88994 was published Sep 18, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database