Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,583
Rust
21

1,330 advisories

Loading
Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in... Critical Unreviewed
CVE-2026-73695 was published Nov 2, 2026
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... Moderate Unreviewed
CVE-2026-62121 was published Oct 30, 2026
DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows... High Unreviewed
CVE-2010-20125 was published Oct 30, 2026
The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and... Moderate Unreviewed
CVE-2026-110185 was published Oct 28, 2026
C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0... High Unreviewed
CVE-2014-125137 was published Oct 28, 2026
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... High Unreviewed
CVE-2026-112850 was published Oct 23, 2026
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... High Unreviewed
CVE-2026-112820 was published Oct 22, 2026
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... Critical Unreviewed
CVE-2026-112832 was published Oct 22, 2026
Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion... High Unreviewed
CVE-2017-20289 was published Oct 22, 2026
Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that... Critical Unreviewed
CVE-2016-20101 was published Oct 20, 2026
ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability.... High Unreviewed
CVE-2026-113402 was published Oct 20, 2026
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... Moderate Unreviewed
CVE-2026-111829 was published Oct 19, 2026
YOURLS: Unauthenticated File Inclusion Moderate
CVE-2026-62858 was published for yourls/yourls (Composer) Oct 15, 2026
web-hacker-team Credited to web-hacker-team, ozh, dgw, and LeoColomb ozh ozh
dgw dgw LeoColomb LeoColomb
The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is... High Unreviewed
CVE-2026-110284 was published Oct 14, 2026
The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File... High Unreviewed
CVE-2026-103367 was published Oct 14, 2026
The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to,... High Unreviewed
CVE-2026-104909 was published Oct 14, 2026
The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up... High Unreviewed
CVE-2026-104995 was published Oct 14, 2026
Unauthenticated Local File Inclusion in Ambient <= 1.7 versions. High Unreviewed
CVE-2026-66566 was published Oct 10, 2026
Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions. High Unreviewed
CVE-2026-62099 was published Oct 10, 2026
Unauthenticated Local File Inclusion in Fabius <= 1.0 versions. High Unreviewed
CVE-2026-62069 was published Oct 10, 2026
Unauthenticated Local File Inclusion in Teoro <= 1.1 versions. High Unreviewed
CVE-2026-62068 was published Oct 10, 2026
Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions. High Unreviewed
CVE-2026-62075 was published Oct 10, 2026
Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions. High Unreviewed
CVE-2026-62070 was published Oct 10, 2026
Unauthenticated Local File Inclusion in Cardea <= 2.3 versions. High Unreviewed
CVE-2026-62065 was published Oct 10, 2026
Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions. High Unreviewed
CVE-2026-62092 was published Oct 10, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database