Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,613
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

436 advisories

Loading
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release... Low Unreviewed
CVE-2026-90727 was published Oct 27, 2026
PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions... Moderate Unreviewed
CVE-2026-68866 was published Oct 27, 2026
Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server... Critical Unreviewed
CVE-2026-115812 was published Oct 23, 2026
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal... Moderate Unreviewed
CVE-2026-114714 was published Oct 22, 2026
Duplicate Advisory: uv vulnerable to arbitrary file deletion through RECORD entries High
GHSA-m3wx-qqmx-qxvf was published for uv (pip) Oct 21, 2026 • withdrawn
In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint... High Unreviewed
CVE-2026-111093 was published Oct 15, 2026
P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges... High Unreviewed
CVE-2026-103508 was published Oct 15, 2026
A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker... High Unreviewed
CVE-2026-41545 was published Oct 15, 2026
A relative path traversal vulnerability has been reported to affect Download Station. If a remote... High Unreviewed
CVE-2026-39993 was published Oct 15, 2026
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway... Critical Unreviewed
CVE-2026-76519 was published Oct 14, 2026
Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal... High Unreviewed
CVE-2026-110690 was published Oct 14, 2026
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code... High Unreviewed
CVE-2026-83923 was published Oct 13, 2026
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges... High Unreviewed
CVE-2026-83873 was published Oct 13, 2026
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to... Moderate Unreviewed
CVE-2026-83865 was published Oct 13, 2026
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges... High Unreviewed
CVE-2026-70222 was published Oct 13, 2026
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform... Moderate Unreviewed
CVE-2026-69968 was published Oct 13, 2026
Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in... Moderate Unreviewed
CVE-2026-105275 was published Oct 9, 2026
Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in... High Unreviewed
CVE-2026-101024 was published Oct 8, 2026
Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation... Critical Unreviewed
CVE-2026-103663 was published Oct 8, 2026
A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco... Critical Unreviewed
CVE-2026-76454 was published Oct 7, 2026
Backstage: Improper input validation in TechDocs static content requests Moderate
CVE-2026-106490 was published for @backstage/plugin-techdocs-backend (npm) Oct 7, 2026
Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be... Moderate Unreviewed
CVE-2026-90466 was published Oct 7, 2026
In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be... Moderate Unreviewed
CVE-2026-106552 was published Oct 6, 2026
Vibe-Trading file-read tools expose arbitrary server-readable files High
GHSA-5rmq-chc7-m22f was published for vibe-trading-ai (pip) Oct 2, 2026
lemi9090 Credited to lemi9090
Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe... High Unreviewed
CVE-2026-103278 was published Oct 1, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database