Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,583
Rust
21

155 advisories

Loading
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login... Moderate Unreviewed
CVE-2026-114572 was published Oct 30, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator... Moderate Unreviewed
CVE-2026-107261 was published Oct 30, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator... Moderate Unreviewed
CVE-2026-107254 was published Oct 30, 2026
MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow Moderate
CVE-2026-55186 was published for silverstripe/mfa (Composer) Oct 29, 2026
go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which... Moderate Unreviewed
CVE-2026-118681 was published Oct 28, 2026
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication... Moderate Unreviewed
CVE-2026-114732 was published Oct 22, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API... Moderate Unreviewed
CVE-2026-96385 was published Oct 22, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email... Moderate Unreviewed
CVE-2026-84923 was published Oct 22, 2026
在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hba_getauthmethod() 在处理... Moderate Unreviewed
CVE-2026-111438 was published Oct 19, 2026
Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows... Moderate Unreviewed
CVE-2026-111712 was published Oct 16, 2026
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication... Moderate Unreviewed
CVE-2026-110852 was published Oct 15, 2026
Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security... Moderate Unreviewed
CVE-2026-85865 was published Oct 13, 2026
Insufficient verification of data authenticity in Windows DHCP Server allows an authorized... Moderate Unreviewed
CVE-2026-83787 was published Oct 13, 2026
An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an... Moderate Unreviewed
CVE-2026-11731 was published Oct 13, 2026
A malicious user with physical access to the device can boot the switch from factory settings... Moderate Unreviewed
CVE-2026-33272 was published Oct 9, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack... Moderate Unreviewed
CVE-2026-106601 was published Oct 9, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack... Moderate Unreviewed
CVE-2026-106602 was published Oct 9, 2026
The Arkime live capture service (arkime-live) in Malcolm runs with network_mode: host, exposing... Moderate Unreviewed
CVE-2026-107361 was published Oct 8, 2026
Unauthenticated Broken Authentication in Advanced Google reCAPTCHA <= 5.40 versions. Moderate Unreviewed
CVE-2026-100518 was published Oct 6, 2026
In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible... Moderate Unreviewed
CVE-2026-100261 was published Sep 30, 2026
The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its... Moderate Unreviewed
CVE-2026-88828 was published Sep 28, 2026
Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server... Moderate Unreviewed
CVE-2026-79680 was published Sep 24, 2026
Steeltoe: Header-forwarded client cert lacks proof of private-key possession Moderate
CVE-2026-81868 was published for Steeltoe.Security.Authorization.Certificate (NuGet) Sep 17, 2026
goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests,... Moderate Unreviewed
CVE-2026-91143 was published Sep 15, 2026
Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account... Moderate Unreviewed
CVE-2026-81906 was published Sep 11, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database