Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,581
Rust
21

359 advisories

Loading
xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerability in... Moderate Unreviewed
CVE-2026-119703 was published Oct 30, 2026
OPNsense core 26.1.6 through 26.7.7 contains an authentication bypass vulnerability in the... Moderate Unreviewed
CVE-2026-119425 was published Oct 30, 2026
Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Spoofing... Moderate Unreviewed
CVE-2026-115962 was published Oct 29, 2026
Echo has Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration Moderate
CVE-2026-118653 was published for github.com/labstack/echo/v4 (Go) Oct 28, 2026
bugbunny-research Credited to bugbunny-research
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8,... Moderate Unreviewed
CVE-2026-86391 was published Oct 28, 2026
The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by... Moderate Unreviewed
CVE-2026-107147 was published Oct 27, 2026
An access-control vulnerability has been identified in the web server configuration. Some... Moderate Unreviewed
CVE-2026-70381 was published Oct 26, 2026
An organizer authentication vulnerability in the email calendar processing of Zimbra... Moderate Unreviewed
CVE-2026-93627 was published Oct 23, 2026
An organizer authentication vulnerability in Zimbra Collaboration Suite (ZCS) allows an... Moderate Unreviewed
CVE-2026-93629 was published Oct 23, 2026
An attendee authentication vulnerability in the email calendar processing of Zimbra Collaboration... Moderate Unreviewed
CVE-2026-93628 was published Oct 23, 2026
The Contest Gallery WordPress plugin before 34.0.1 does not reliably validate the visitor... Moderate Unreviewed
CVE-2026-107447 was published Oct 21, 2026
The Payment Gateway for Idram WordPress plugin before 2.1.6 does not verify the authenticity of... Moderate Unreviewed
CVE-2026-103302 was published Oct 21, 2026
Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that... Moderate Unreviewed
CVE-2026-111623 was published Oct 16, 2026
holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway... Moderate Unreviewed
CVE-2026-110768 was published Oct 14, 2026
Improper access control in Windows NTFS allows an authorized attacker to disclose information... Moderate Unreviewed
CVE-2026-83864 was published Oct 13, 2026
pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled `X-Forwarded-For` Header Moderate
GHSA-9q47-3cm2-2rp8 was published for pyload-ng (pip) Oct 9, 2026
nirtem Credited to nirtem
Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a... Moderate Unreviewed
CVE-2026-107336 was published Oct 8, 2026
A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext... Moderate Unreviewed
CVE-2026-4894 was published Oct 8, 2026
An authentication and access control bypass vulnerability exists in the web server management... Moderate Unreviewed
CVE-2026-87686 was published Oct 8, 2026
An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST... Moderate Unreviewed
CVE-2026-87670 was published Oct 8, 2026
Authenticated users are able to manipulate both the SMTP envelope “Envelope-from” and “From”... Moderate Unreviewed
CVE-2026-33586 was published Oct 7, 2026
Apache YuniKorn 1.9.0 and earlier allows bypassing the check for the user annotation by setting a... Moderate Unreviewed
CVE-2026-97146 was published Oct 7, 2026
Unauthenticated Bypass Vulnerability in Login Lockdown <= 2.17 versions. Moderate Unreviewed
CVE-2026-97308 was published Oct 6, 2026
Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft <= 5.2.8 versions. Moderate Unreviewed
CVE-2026-39772 was published Oct 6, 2026
Unauthenticated Bypass Vulnerability in Zero Spam <= 5.7.11 versions. Moderate Unreviewed
CVE-2026-105057 was published Oct 6, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database