Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

61 advisories

Loading
Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted... Critical Unreviewed
CVE-2026-115372 was published Oct 22, 2026
Apache Traffic Server's experimental magick plugin lets an unauthenticated client control... Critical Unreviewed
CVE-2026-111813 was published Oct 21, 2026
GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull(... Critical Unreviewed
CVE-2026-110858 was published Oct 15, 2026
Potential arbitrary code execution, under specific configurations. Critical Unreviewed
CVE-2026-92892 was published Oct 13, 2026
An authenticated high privilege user can inject arguments in troubleshooting commands resulting... Critical Unreviewed
CVE-2026-107510 was published Oct 8, 2026
Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting:... Critical Unreviewed
CVE-2026-100714 was published Sep 26, 2026
Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated... Critical Unreviewed
CVE-2026-87900 was published Sep 23, 2026
A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The Project... Critical Unreviewed
CVE-2026-84502 was published Sep 23, 2026
An authenticated, low-privileged user with access to the NetBackup Flex OS management shell... Critical Unreviewed
CVE-2026-28197 was published Sep 18, 2026
Command Argument Injection Vulnerability in Cosminexus Component Container. This issue affects... Critical Unreviewed
CVE-2026-71377 was published Sep 8, 2026
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin... Critical Unreviewed
CVE-2026-86060 was published Sep 5, 2026
Improper neutralization of argument delimiters in a command ('argument injection') in Azure... Critical Unreviewed
CVE-2026-65770 was published Aug 21, 2026
PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags... Critical Unreviewed
CVE-2026-16770 was published Aug 13, 2026
Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue... Critical Unreviewed
CVE-2026-73240 was published Aug 12, 2026
Argument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WHM,... Critical Unreviewed
CVE-2026-47365 was published Jun 12, 2026
The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection... Critical Unreviewed
CVE-2026-31230 was published May 12, 2026
Improper neutralization of argument delimiters in a command ('argument injection') vulnerability... Critical Unreviewed
CVE-2026-2449 was published Apr 14, 2026
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability... Critical Unreviewed
CVE-2026-2298 was published Mar 23, 2026
TOTOLINK X5000R v9.1.0cu_2415_B20250515 contains an argument injection vulnerability in the... Critical Unreviewed
CVE-2025-70327 was published Feb 23, 2026
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability... Critical Unreviewed
CVE-2026-22582 was published Jan 24, 2026
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability... Critical Unreviewed
CVE-2026-22583 was published Jan 24, 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value... Critical Unreviewed
CVE-2026-24061 was published Jan 21, 2026
asdasdasdasdasdasdasd Critical Unreviewed
CVE-2025-11150 was published Sep 29, 2025
A vulnerability was found in Pagure. An argument injection in Git during retrieval of the... Critical Unreviewed
CVE-2024-47516 was published Mar 26, 2025
Argument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated... Critical Unreviewed
CVE-2024-11633 was published Dec 10, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database