Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,187
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,613
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

1,300 advisories

Loading
Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update... Moderate Unreviewed
CVE-2026-33522 was published Oct 26, 2026
A vulnerability was identified in iFlytek astron-agent up to 1.1.2. This impacts the function... Low Unreviewed
CVE-2026-116340 was published Oct 26, 2026
Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController:... Critical Unreviewed
CVE-2026-116199 was published Oct 25, 2026
A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function... Low Unreviewed
CVE-2026-115803 was published Oct 24, 2026
obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP High
CVE-2026-115477 was published for obsidian-tc (npm) Oct 23, 2026
suavecito585 Credited to suavecito585
Improper authorization in Apache bRPC (versions < 1.18.0) on all platforms allows remote... Unknown Unreviewed
CVE-2026-84748 was published Oct 21, 2026
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System)... High Unreviewed
CVE-2026-87421 was published Oct 21, 2026
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The... Low Unreviewed
CVE-2026-87422 was published Oct 21, 2026
IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an... Critical Unreviewed
CVE-2026-81212 was published Oct 21, 2026
A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function... Moderate Unreviewed
CVE-2026-113643 was published Oct 20, 2026
A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function... Low Unreviewed
CVE-2026-113411 was published Oct 20, 2026
An authorization issue was addressed with improved state management. This issue is fixed in iOS... Moderate Unreviewed
CVE-2026-86976 was published Oct 20, 2026
A weakness has been identified in calcom cal.com and cal.diy up to 6.2.0. Impacted is the... Moderate Unreviewed
CVE-2026-112043 was published Oct 19, 2026
Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows... Moderate Unreviewed
CVE-2026-111913 was published Oct 17, 2026
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due... Moderate Unreviewed
CVE-2026-17068 was published Oct 16, 2026
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation... Low Unreviewed
CVE-2026-17275 was published Oct 16, 2026
Nginx UI: Account Takeover via Missing `RequireSecureSession` on User Management Endpoint High
CVE-2026-84314 was published for github.com/0xJacky/Nginx-UI (Go) Oct 15, 2026
Insufficient granularity of access control in Windows StateRepository API allows an authorized... High Unreviewed
CVE-2026-70218 was published Oct 13, 2026
Froxlor 0.10.0 before 2.3.14 contains a missing authorization vulnerability that allows reseller... Moderate Unreviewed
CVE-2026-109962 was published Oct 13, 2026
A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to... Moderate Unreviewed
CVE-2026-109116 was published Oct 13, 2026
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders... High Unreviewed
CVE-2026-17475 was published Oct 13, 2026
Frappe before 13.22.0 contains an improper authorization vulnerability that allows authenticated... Moderate Unreviewed
CVE-2023-54410 was published Oct 13, 2026
A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the... Moderate Unreviewed
CVE-2026-108924 was published Oct 12, 2026
A flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This affects an unknown part... Moderate Unreviewed
CVE-2026-108796 was published Oct 12, 2026
A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability... Moderate Unreviewed
CVE-2026-108797 was published Oct 12, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database