Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,187
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,613
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

772 advisories

Loading
Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI /... High Unreviewed
CVE-2026-92546 was published Oct 27, 2026
Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue... Critical Unreviewed
CVE-2026-76938 was published Oct 27, 2026
Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects HiRDB Server... Critical Unreviewed
CVE-2026-82117 was published Oct 27, 2026
The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by... Moderate Unreviewed
CVE-2026-107147 was published Oct 27, 2026
An access-control vulnerability has been identified in the web server configuration. Some... Moderate Unreviewed
CVE-2026-70381 was published Oct 26, 2026
Postiz signs its session, invitation and password reset tokens with one shared secret and without... Critical Unreviewed
CVE-2026-115933 was published Oct 24, 2026
An organizer authentication vulnerability in the email calendar processing of Zimbra... Moderate Unreviewed
CVE-2026-93627 was published Oct 23, 2026
An organizer authentication vulnerability in Zimbra Collaboration Suite (ZCS) allows an... Moderate Unreviewed
CVE-2026-93629 was published Oct 23, 2026
An attendee authentication vulnerability in the email calendar processing of Zimbra Collaboration... Moderate Unreviewed
CVE-2026-93628 was published Oct 23, 2026
The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing.... High Unreviewed
CVE-2025-30052 was published Oct 23, 2026
Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows... Critical Unreviewed
CVE-2022-51026 was published Oct 22, 2026
Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows... Critical Unreviewed
CVE-2026-112241 was published Oct 22, 2026
Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its... High Unreviewed
CVE-2026-114640 was published Oct 22, 2026
The Contest Gallery WordPress plugin before 34.0.1 does not reliably validate the visitor... Moderate Unreviewed
CVE-2026-107447 was published Oct 21, 2026
The Payment Gateway for Idram WordPress plugin before 2.1.6 does not verify the authenticity of... Moderate Unreviewed
CVE-2026-103302 was published Oct 21, 2026
SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass... Critical Unreviewed
CVE-2026-113703 was published Oct 20, 2026
WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows... Critical Unreviewed
CVE-2026-111691 was published Oct 16, 2026
Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that... Moderate Unreviewed
CVE-2026-111623 was published Oct 16, 2026
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The... Critical Unreviewed
CVE-2026-102764 was published Oct 15, 2026
An unauthenticated remote attacker can bypass authentication and gain full access to... Critical Unreviewed
CVE-2026-84731 was published Oct 15, 2026
In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver... High Unreviewed
CVE-2026-110723 was published Oct 15, 2026
holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway... Moderate Unreviewed
CVE-2026-110768 was published Oct 14, 2026
An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress... High Unreviewed
CVE-2026-94197 was published Oct 14, 2026
Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom... High Unreviewed
CVE-2026-96615 was published Oct 14, 2026
Improper access control in Windows NTFS allows an authorized attacker to disclose information... Moderate Unreviewed
CVE-2026-83864 was published Oct 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database