Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,583
Rust
21

1,547 advisories

Loading
Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default... High Unreviewed
CVE-2026-91895 was published Nov 2, 2026
Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27... High Unreviewed
CVE-2026-107052 was published Oct 29, 2026
GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch... High Unreviewed
CVE-2026-112357 was published Oct 28, 2026
Strands Agents: Default FileSessionManager storage is world-readable on shared systems Moderate
GHSA-763v-5pjm-fx36 was published for strands-agents (pip) Oct 27, 2026
whyiug Credited to whyiug
Electronic delivery item Inspection Support System provided by Japan's Ministry of Land,... High Unreviewed
CVE-2026-113345 was published Oct 26, 2026
obsidian-tc: Default folder ACL is fail-open; .obsidian plugin secrets are readable by default Moderate
CVE-2026-77364 was published for obsidian-tc (npm) Oct 23, 2026
suavecito585 Credited to suavecito585
An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a... High Unreviewed
CVE-2026-115253 was published Oct 22, 2026
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0... High Unreviewed
CVE-2026-107571 was published Oct 19, 2026
Incorrect Default Permissions vulnerability in Apache Camel PQC component. This issue affects... Moderate Unreviewed
CVE-2026-85300 was published Oct 19, 2026
Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The... Moderate Unreviewed
CVE-2026-108072 was published Oct 14, 2026
Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This... High Unreviewed
CVE-2026-110359 was published Oct 14, 2026
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to... High Unreviewed
CVE-2026-105009 was published Oct 13, 2026
Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to... Low Unreviewed
CVE-2026-21131 was published Oct 12, 2026
ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions... Low Unreviewed
CVE-2026-108503 was published Oct 10, 2026
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0... High Unreviewed
CVE-2026-107573 was published Oct 8, 2026
Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These... Moderate Unreviewed
CVE-2026-78413 was published Oct 5, 2026
Froxlor through 2.3.10 does not enforce the mail.allow_external_domains policy in the EmailSender... High Unreviewed
CVE-2026-100718 was published Sep 26, 2026
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows... Moderate Unreviewed
CVE-2026-6718 was published Sep 23, 2026
Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default... Moderate Unreviewed
CVE-2026-82163 was published Sep 21, 2026
Dell Command | Integration Suite for System Center, versions prior to 6.7.2, contain an Incorrect... Moderate Unreviewed
CVE-2026-82165 was published Sep 21, 2026
Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows... Moderate Unreviewed
CVE-2026-92252 was published Sep 20, 2026
Local privilege escalation due to insecure file permissions. The following products are affected:... High Unreviewed
CVE-2026-87886 was published Sep 18, 2026
Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions... High Unreviewed
CVE-2026-86359 was published Sep 16, 2026
In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control... High Unreviewed
CVE-2026-86836 was published Sep 14, 2026
A potential improper permissions vulnerability was reported in the Lenovo Filez Client... High Unreviewed
CVE-2026-11813 was published Sep 10, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database