Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,581
Rust
21

676 advisories

Loading
In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step and... High Unreviewed
CVE-2026-115829 was published Oct 30, 2026
Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization... High Unreviewed
CVE-2026-119420 was published Oct 30, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows... Unknown Unreviewed
CVE-2026-118582 was published Oct 30, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login -... Unknown Unreviewed
CVE-2026-118572 was published Oct 30, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect... Unknown Unreviewed
CVE-2026-118554 was published Oct 30, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login... Moderate Unreviewed
CVE-2026-114572 was published Oct 30, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck Basic... Unknown Unreviewed
CVE-2026-114539 was published Oct 30, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator... Moderate Unreviewed
CVE-2026-107261 was published Oct 30, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator... Moderate Unreviewed
CVE-2026-107254 was published Oct 30, 2026
MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow Moderate
CVE-2026-55186 was published for silverstripe/mfa (Composer) Oct 29, 2026
go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which... Moderate Unreviewed
CVE-2026-118681 was published Oct 28, 2026
A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor... High Unreviewed
CVE-2026-107671 was published Oct 27, 2026
The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass... High Unreviewed
CVE-2026-116638 was published Oct 26, 2026
An authentication bypass using an alternate path or channel vulnerability in Fortinet... Critical Unreviewed
CVE-2026-107656 was published Oct 26, 2026
No description provided Critical Unreviewed
CVE-2026-79855 was published Oct 22, 2026
No description provided Critical Unreviewed
CVE-2026-79850 was published Oct 22, 2026
No description provided Critical Unreviewed
CVE-2026-79844 was published Oct 22, 2026
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication... Moderate Unreviewed
CVE-2026-114732 was published Oct 22, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API... Moderate Unreviewed
CVE-2026-96385 was published Oct 22, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop... Low Unreviewed
CVE-2026-96387 was published Oct 22, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email... Moderate Unreviewed
CVE-2026-84923 was published Oct 22, 2026
Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI... High Unreviewed
CVE-2026-114635 was published Oct 22, 2026
在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hba_getauthmethod() 在处理... Moderate Unreviewed
CVE-2026-111438 was published Oct 19, 2026
Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows... Moderate Unreviewed
CVE-2026-111712 was published Oct 16, 2026
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could... High Unreviewed
CVE-2026-89057 was published Oct 16, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database