Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,191
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,584
Rust
21

94 advisories

Loading
Docker Sandboxes versions 0.31.0 before 0.50.0 do not neutralize repository-controlled Git... High Unreviewed
CVE-2026-121614 was published Nov 4, 2026
AzuraCast through 0.23.8 fails to remove frontend_config.custom_config in PUT /station/{id}... High Unreviewed
CVE-2026-121427 was published Nov 3, 2026
An external control of system or configuration setting vulnerability has been reported to affect... Moderate Unreviewed
CVE-2025-68403 was published Oct 15, 2026
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution... High Unreviewed
CVE-2026-110845 was published Oct 15, 2026
External control of system or configuration setting in Microsoft PowerToys allows an authorized... High Unreviewed
CVE-2026-96188 was published Oct 13, 2026
Improper access control in Windows Update Stack allows an authorized attacker to perform... Moderate Unreviewed
CVE-2026-96218 was published Oct 13, 2026
External control of system or configuration setting in Windows Setup Files Cleanup allows an... High Unreviewed
CVE-2026-73027 was published Oct 13, 2026
Unvalidated environments URL allows OAuth authorization code + PKCE verifier theft and account... High Unreviewed
CVE-2026-107503 was published Oct 8, 2026
A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI)... High Unreviewed
CVE-2026-94577 was published Oct 8, 2026
Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script... Critical Unreviewed
CVE-2026-105294 was published Oct 5, 2026
External control of system or configuration setting vulnerability in The Wikimedia Foundation... High Unreviewed
CVE-2026-103442 was published Sep 30, 2026
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command... Critical Unreviewed
CVE-2026-87987 was published Sep 11, 2026
A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify... High Unreviewed
CVE-2026-85217 was published Sep 10, 2026
A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker... Critical Unreviewed
CVE-2026-13745 was published Sep 10, 2026
OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree... Critical Unreviewed
CVE-2026-19593 was published Sep 1, 2026
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS... High Unreviewed
CVE-2026-19592 was published Sep 1, 2026
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive... High Unreviewed
CVE-2026-16708 was published Aug 14, 2026
In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control... High Unreviewed
CVE-2026-19884 was published Aug 14, 2026
HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities. It involves the... Moderate Unreviewed
CVE-2026-56567 was published Jul 31, 2026
SAP CRM WebClient UI allows an attacker to inject and execute malicious scripts in the context of... Moderate Unreviewed
CVE-2026-44768 was published Jul 14, 2026
ouroboros-ai: Incomplete fix of CVE-2026-47211: untrusted project .env can still reach RCE via omitted execution-routing keys High
GHSA-jv2h-4p9v-wf5w was published for ouroboros-ai (pip) Jun 19, 2026
hackkim Credited to hackkim and matte1782 matte1782 matte1782
Insufficient configuration management in the listed devices allows authenticated administrators... Moderate Unreviewed
CVE-2026-0418 was published Jun 9, 2026
The Route OpenShift resource allows to define routes to make pods reachable at a subdomain... High Unreviewed
CVE-2026-1784 was published Jun 2, 2026
Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service... High Unreviewed
CVE-2019-25716 was published Jun 2, 2026
Dalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via `found-action` Critical
CVE-2026-45087 was published for github.com/hahwul/dalfox/v2 (Go) May 12, 2026
drmingler Credited to drmingler
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database