Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

111 advisories

Loading
PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions... Moderate Unreviewed
CVE-2026-68866 was published Oct 27, 2026
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal... Moderate Unreviewed
CVE-2026-114714 was published Oct 22, 2026
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to... Moderate Unreviewed
CVE-2026-83865 was published Oct 13, 2026
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform... Moderate Unreviewed
CVE-2026-69968 was published Oct 13, 2026
Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in... Moderate Unreviewed
CVE-2026-105275 was published Oct 9, 2026
Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be... Moderate Unreviewed
CVE-2026-90466 was published Oct 7, 2026
In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be... Moderate Unreviewed
CVE-2026-106552 was published Oct 6, 2026
An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration... Moderate Unreviewed
CVE-2023-29377 was published Sep 14, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... Moderate Unreviewed
CVE-2026-79728 was published Sep 9, 2026
The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability.... Moderate Unreviewed
CVE-2026-87747 was published Sep 9, 2026
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. Moderate Unreviewed
CVE-2026-72948 was published Sep 8, 2026
A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code ... Moderate Unreviewed
CVE-2026-81838 was published Aug 27, 2026
Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux... Moderate Unreviewed
CVE-2026-77113 was published Aug 21, 2026
Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access... Moderate Unreviewed
CVE-2026-21082 was published Aug 10, 2026
Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose... Moderate Unreviewed
CVE-2026-62837 was published Aug 11, 2026
Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path... Moderate Unreviewed
CVE-2026-56794 was published Aug 7, 2026
A Path Traversal vulnerability exists in Quick.CMS through the URI path component of HTTP... Moderate Unreviewed
CVE-2026-63303 was published Jul 28, 2026
Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain... Moderate Unreviewed
CVE-2026-51026 was published Jul 20, 2026
Relative path traversal in DNS Server allows an authorized attacker to execute code over an... Moderate Unreviewed
CVE-2026-50426 was published Jul 14, 2026
Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module). This... Moderate Unreviewed
CVE-2026-8650 was published Jul 8, 2026
scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when... Moderate Unreviewed
CVE-2026-59996 was published Jul 8, 2026
sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ... Moderate Unreviewed
CVE-2026-59995 was published Jul 8, 2026
Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose... Moderate Unreviewed
CVE-2026-58522 was published Jul 3, 2026
Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform... Moderate Unreviewed
CVE-2026-47287 was published Jun 9, 2026
DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged... Moderate Unreviewed
CVE-2026-10074 was published May 29, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database