Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,620
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

296 advisories

Loading
A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web... High Unreviewed
CVE-2023-7357 was published Oct 29, 2026
Wildfly's IIOP listener may permit deserialization of input streams before authentication is... High Unreviewed
CVE-2026-15564 was published Oct 29, 2026
A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations... High Unreviewed
CVE-2026-114488 was published Oct 29, 2026
when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase... High Unreviewed
CVE-2026-84725 was published Oct 28, 2026
vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution High
CVE-2026-114053 was published for vllm (pip) Oct 27, 2026
adithyan-ak Credited to adithyan-ak, jperezdealgaba, and DarkLight1337 jperezdealgaba jperezdealgaba
DarkLight1337 DarkLight1337
NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer... High Unreviewed
CVE-2026-65119 was published Oct 27, 2026
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to... High Unreviewed
CVE-2026-116843 was published Oct 27, 2026
A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function... Low Unreviewed
CVE-2026-115802 was published Oct 24, 2026
Black: GitHub Action installs unvalidated required-version from pyproject.toml High
CVE-2026-114134 was published for black (pip) Oct 22, 2026
jiteshgulati Credited to jiteshgulati
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into... High Unreviewed
CVE-2026-114727 was published Oct 22, 2026
This issue was addressed by enforcing library validation on the affected binaries. This issue is... High Unreviewed
CVE-2026-86949 was published Oct 20, 2026
This issue was addressed by enforcing library validation on the affected binaries. This issue is... High Unreviewed
CVE-2026-86948 was published Oct 20, 2026
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache... High Unreviewed
CVE-2026-111357 was published Oct 15, 2026
Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning High
CVE-2026-86063 was published for @anthropic-ai/claude-code (npm) Oct 15, 2026
In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP... High Unreviewed
CVE-2026-111091 was published Oct 15, 2026
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an... High Unreviewed
CVE-2026-87695 was published Oct 13, 2026
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver... High Unreviewed
CVE-2026-85355 was published Oct 13, 2026
Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an... High Unreviewed
CVE-2026-70267 was published Oct 13, 2026
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because... High Unreviewed
CVE-2026-108913 was published Oct 11, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an... High Unreviewed
CVE-2026-78019 was published Oct 9, 2026
PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow High
CVE-2026-61437 was published for praisonaiagents (pip) Oct 8, 2026
Nx7n Credited to Nx7n
Docling imports plugin entry points before the allow_external_plugins check Moderate
CVE-2026-105745 was published for docling (pip) Oct 7, 2026
hypnguyen1209 Credited to hypnguyen1209
Ghost: Remote Code Execution via Theme Translation Files High
CVE-2026-105677 was published for ghost (npm) Oct 7, 2026
Alemmi Credited to Alemmi, Tomer-PL, and msegoviag Tomer-PL Tomer-PL
msegoviag msegoviag
knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json High
CVE-2026-86540 was published for knowns (npm) Oct 6, 2026
uziii2208 Credited to uziii2208 and hoanggxyuuki hoanggxyuuki hoanggxyuuki
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the... High Unreviewed
CVE-2026-63277 was published Oct 5, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database