Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,187
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,613
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

201 advisories

Loading
Duplicate Advisory: uv vulnerable to arbitrary file deletion through RECORD entries High
GHSA-m3wx-qqmx-qxvf was published for uv (pip) Oct 21, 2026 • withdrawn
A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2,... High Unreviewed
CVE-2022-42476 was published Mar 7, 2023
In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint... High Unreviewed
CVE-2026-111093 was published Oct 15, 2026
P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges... High Unreviewed
CVE-2026-103508 was published Oct 15, 2026
A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker... High Unreviewed
CVE-2026-41545 was published Oct 15, 2026
A relative path traversal vulnerability has been reported to affect Download Station. If a remote... High Unreviewed
CVE-2026-39993 was published Oct 15, 2026
Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal... High Unreviewed
CVE-2026-110690 was published Oct 14, 2026
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code... High Unreviewed
CVE-2026-83923 was published Oct 13, 2026
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges... High Unreviewed
CVE-2026-83873 was published Oct 13, 2026
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges... High Unreviewed
CVE-2026-70222 was published Oct 13, 2026
Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in... High Unreviewed
CVE-2026-101024 was published Oct 8, 2026
Vibe-Trading file-read tools expose arbitrary server-readable files High
GHSA-5rmq-chc7-m22f was published for vibe-trading-ai (pip) Oct 2, 2026
lemi9090 Credited to lemi9090
Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe... High Unreviewed
CVE-2026-103278 was published Oct 1, 2026
Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files... High Unreviewed
CVE-2026-10739 was published Sep 30, 2026
The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote... High Unreviewed
CVE-2026-93468 was published Sep 18, 2026
A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to... High Unreviewed
CVE-2026-76424 was published Sep 16, 2026
Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary... High Unreviewed
CVE-2026-82768 was published Sep 14, 2026
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If... High Unreviewed
CVE-2026-82765 was published Sep 14, 2026
A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible... High Unreviewed
CVE-2023-45858 was published Sep 14, 2026
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of... High Unreviewed
CVE-2026-15913 was published Sep 10, 2026
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges... High Unreviewed
CVE-2026-77897 was published Sep 8, 2026
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server... High Unreviewed
CVE-2026-78254 was published Sep 7, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... High Unreviewed
CVE-2026-80130 was published Sep 7, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... High Unreviewed
CVE-2026-80133 was published Sep 7, 2026
A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components()... High Unreviewed
CVE-2026-14476 was published Jul 7, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database