Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,620
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

162 advisories

Loading
A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the... Critical Unreviewed
CVE-2026-114575 was published Oct 22, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, engineering... Critical Unreviewed
CVE-2026-76473 was published Oct 21, 2026
A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of... Critical Unreviewed
CVE-2026-108929 was published Oct 12, 2026
A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the... Critical Unreviewed
CVE-2026-108918 was published Oct 12, 2026
A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown... Critical Unreviewed
CVE-2026-108917 was published Oct 12, 2026
There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows... Critical Unreviewed
CVE-2026-82989 was published Oct 6, 2026
A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function... Critical Unreviewed
CVE-2026-105135 was published Oct 4, 2026
Improper Neutralization of Special Elements in Output Used by a Downstream Component in the... Critical Unreviewed
CVE-2026-95832 was published Sep 25, 2026
A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown... Critical Unreviewed
CVE-2026-94097 was published Sep 21, 2026
Improper neutralization of special elements in output used by a downstream component ('injection'... Critical Unreviewed
CVE-2026-87701 was published Sep 18, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco... Critical Unreviewed
CVE-2026-20130 was published Sep 16, 2026
IBM MQ 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9... Critical Unreviewed
CVE-2026-12351 was published Sep 15, 2026
Improper neutralization of special elements in output used by a downstream component ('injection'... Critical Unreviewed
CVE-2026-65669 was published Sep 8, 2026
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown... Critical Unreviewed
CVE-2026-82971 was published Sep 1, 2026
The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting... Critical Unreviewed
CVE-2026-19092 was published Aug 27, 2026
An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud... Critical Unreviewed
CVE-2026-12717 was published Aug 26, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure... Critical Unreviewed
CVE-2026-20231 was published Aug 19, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE... Critical Unreviewed
CVE-2026-20272 was published Aug 5, 2026
Wazuh Manager before 5.0.0-beta3 fails to escape the DataValue.index field when constructing... Critical Unreviewed
CVE-2026-56699 was published Jul 15, 2026
The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote... Critical Unreviewed
CVE-2026-6279 was published May 21, 2026
Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before... Critical Unreviewed
CVE-2024-27708 was published Dec 22, 2025
Quipux 4.0.1 through e1774ac allows authenticated users to conduct SQL injection attacks via... Critical Unreviewed
CVE-2025-55343 was published Nov 5, 2025
Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output... Critical Unreviewed
CVE-2025-8276 was published Sep 16, 2025
A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute... Critical Unreviewed
CVE-2025-56266 was published Sep 8, 2025
A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center... Critical Unreviewed
CVE-2025-20265 was published Aug 14, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database