Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,584
Rust
21

745 advisories

Loading
Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default... High Unreviewed
CVE-2026-91895 was published Nov 2, 2026
Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27... High Unreviewed
CVE-2026-107052 was published Oct 29, 2026
GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch... High Unreviewed
CVE-2026-112357 was published Oct 28, 2026
Electronic delivery item Inspection Support System provided by Japan's Ministry of Land,... High Unreviewed
CVE-2026-113345 was published Oct 26, 2026
An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a... High Unreviewed
CVE-2026-115253 was published Oct 22, 2026
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0... High Unreviewed
CVE-2026-107571 was published Oct 19, 2026
Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This... High Unreviewed
CVE-2026-110359 was published Oct 14, 2026
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to... High Unreviewed
CVE-2026-105009 was published Oct 13, 2026
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0... High Unreviewed
CVE-2026-107573 was published Oct 8, 2026
Froxlor through 2.3.10 does not enforce the mail.allow_external_domains policy in the EmailSender... High Unreviewed
CVE-2026-100718 was published Sep 26, 2026
Local privilege escalation due to insecure file permissions. The following products are affected:... High Unreviewed
CVE-2026-87886 was published Sep 18, 2026
Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions... High Unreviewed
CVE-2026-86359 was published Sep 16, 2026
In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control... High Unreviewed
CVE-2026-86836 was published Sep 14, 2026
A potential improper permissions vulnerability was reported in the Lenovo Filez Client... High Unreviewed
CVE-2026-11813 was published Sep 10, 2026
In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which... High Unreviewed
CVE-2026-77393 was published Sep 5, 2026
PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a... High Unreviewed
CVE-2026-81302 was published Sep 4, 2026
A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe... High Unreviewed
CVE-2026-9634 was published Sep 1, 2026
A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe... High Unreviewed
CVE-2026-9633 was published Sep 1, 2026
openssl_encrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the... High Unreviewed
CVE-2026-81682 was published Aug 27, 2026
SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If... High Unreviewed
CVE-2026-69665 was published Aug 25, 2026
RansomLook created its Flask session-signing key without explicitly restricting the file... High Unreviewed
CVE-2026-78553 was published Aug 24, 2026
HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized... High Unreviewed
CVE-2025-68825 was published Aug 24, 2026
Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions... High Unreviewed
CVE-2026-58564 was published Aug 19, 2026
Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket High
CVE-2026-53657 was published for github.com/lima-vm/lima/v2 (Go) Aug 14, 2026
misop00p Credited to misop00p and ansjdnakjdnajkd ansjdnakjdnajkd ansjdnakjdnajkd
During an internal security assessment, a potential improper permissions vulnerability was... High Unreviewed
CVE-2026-63425 was published Aug 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database