Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

360,767 advisories

Loading
Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows... High Unreviewed
CVE-2026-120202 was published Oct 31, 2026
Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers:... High Unreviewed
CVE-2026-120205 was published Oct 31, 2026
FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows... Moderate Unreviewed
CVE-2026-120210 was published Oct 31, 2026
ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that... High Unreviewed
CVE-2026-120203 was published Oct 31, 2026
DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile... Moderate Unreviewed
CVE-2026-120204 was published Oct 31, 2026
Thelia before 3.2.0 contains a cross-site request forgery vulnerability in the back office that... Moderate Unreviewed
CVE-2026-120206 was published Oct 31, 2026
AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to... Critical Unreviewed
CVE-2026-120209 was published Oct 31, 2026
libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in... High Unreviewed
CVE-2026-120208 was published Oct 31, 2026
Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows... High Unreviewed
CVE-2026-120207 was published Oct 31, 2026
Nexterm through 1.2.2-BETA contains a missing authorization vulnerability that allows... Moderate Unreviewed
CVE-2026-120200 was published Oct 31, 2026
LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that... Moderate Unreviewed
CVE-2026-120199 was published Oct 31, 2026
Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows... Critical Unreviewed
CVE-2026-120201 was published Oct 31, 2026
Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0... High Unreviewed
CVE-2026-102212 was published Oct 31, 2026
WebDyne versions from 2.014 before 3.022 for Perl reflect request parameters unescaped into form... Unknown Unreviewed
CVE-2026-78190 was published Oct 31, 2026
WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated... Unknown Unreviewed
CVE-2026-78192 was published Oct 31, 2026
WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure,... Unknown Unreviewed
CVE-2026-78188 was published Oct 31, 2026
WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as... Unknown Unreviewed
CVE-2026-78191 was published Oct 31, 2026
WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root... Unknown Unreviewed
CVE-2026-78189 was published Oct 31, 2026
The Web 2.0 Directory plugin for WordPress is vulnerable to time-based SQL Injection via the ... Moderate Unreviewed
CVE-2026-15272 was published Oct 31, 2026
The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is... High Unreviewed
CVE-2026-76010 was published Oct 31, 2026
The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via... Moderate Unreviewed
CVE-2026-96554 was published Oct 31, 2026
The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is... High Unreviewed
CVE-2026-120114 was published Oct 31, 2026
The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield... High Unreviewed
CVE-2026-109197 was published Oct 31, 2026
A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi... Moderate Unreviewed
CVE-2026-118599 was published Oct 31, 2026
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for... Moderate Unreviewed
CVE-2026-116752 was published Oct 31, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database