Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

137,739 advisories

Loading
Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache... High Unreviewed
CVE-2026-120135 was published Oct 31, 2026
Improper certificate validation in Visual Studio allows an unauthorized attacker to perform... High Unreviewed
CVE-2026-118147 was published Oct 31, 2026
Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows... High Unreviewed
CVE-2026-120202 was published Oct 31, 2026
Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers:... High Unreviewed
CVE-2026-120205 was published Oct 31, 2026
ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that... High Unreviewed
CVE-2026-120203 was published Oct 31, 2026
libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in... High Unreviewed
CVE-2026-120208 was published Oct 31, 2026
Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows... High Unreviewed
CVE-2026-120207 was published Oct 31, 2026
Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0... High Unreviewed
CVE-2026-102212 was published Oct 31, 2026
The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is... High Unreviewed
CVE-2026-76010 was published Oct 31, 2026
The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is... High Unreviewed
CVE-2026-120114 was published Oct 31, 2026
The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield... High Unreviewed
CVE-2026-109197 was published Oct 31, 2026
A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter... High Unreviewed
CVE-2026-120194 was published Oct 31, 2026
The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for... High Unreviewed
CVE-2026-118057 was published Oct 31, 2026
The User Frontend – Membership, User Registration, User Profile, User Directory & Content... High Unreviewed
CVE-2026-120070 was published Oct 31, 2026
A flaw was found in konflux-ci. An attacker with permission to trigger automated workflow runs... High Unreviewed
CVE-2026-116086 was published Oct 31, 2026
A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary... High Unreviewed
CVE-2026-116964 was published Oct 31, 2026
A flaw was found in konflux-ci. Continuous Integration (CI) automation scripts store sensitive... High Unreviewed
CVE-2026-114217 was published Oct 31, 2026
A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user... High Unreviewed
CVE-2026-117681 was published Oct 31, 2026
The FeedWordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions... High Unreviewed
CVE-2026-110530 was published Oct 31, 2026
The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all... High Unreviewed
CVE-2026-120075 was published Oct 31, 2026
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress... High Unreviewed
CVE-2026-119162 was published Oct 31, 2026
The Mail logging & Catcher plugin for WordPress is vulnerable to Sensitive Information Exposure... High Unreviewed
CVE-2026-120040 was published Oct 31, 2026
The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin... High Unreviewed
CVE-2026-119163 was published Oct 31, 2026
The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to... High Unreviewed
CVE-2026-103898 was published Oct 31, 2026
The Rox Appointment Booking – Appointment Booking Scheduling Solution plugin for WordPress is... High Unreviewed
CVE-2026-104012 was published Oct 31, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database