Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

365 advisories

Loading
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes... Moderate Unreviewed
CVE-2026-11906 was published Jun 30, 2026
Unauthenticated Multiple Vulnerabilities in BitFire Security <= 5.0.3 versions. High Unreviewed
CVE-2026-56035 was published Jun 26, 2026
golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS High
CVE-2026-39829 was published for golang.org/x/crypto (Go) Jun 25, 2026
Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0... Low Unreviewed
CVE-2026-12755 was published Jun 25, 2026
CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS... Low Unreviewed
CVE-2026-57062 was published Jun 23, 2026
GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode... Moderate Unreviewed
CVE-2026-57053 was published Jun 23, 2026
Craft Commerce: Partial Payment Amount Without Lower Bound Validation Moderate
GHSA-78vr-q6cf-c7p6 was published for craftcms/commerce (Composer) Jun 19, 2026
lorderroruss Credited to lorderroruss
NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilfs_sb_is_valid() function fails to... Moderate Unreviewed
CVE-2026-55392 was published Jun 18, 2026
spomky-labs/otphp: Unbounded digits parameter in a provisioning URI triggers an uncaught DivisionByZeroError in OTP generation High
GHSA-g7m4-839x-ch6v was published for spomky-labs/otphp (Composer) Jun 18, 2026
sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass... Moderate Unreviewed
CVE-2026-55706 was published Jun 17, 2026
Unauthenticated Other Vulnerability Type in WP Travel Engine <= 6.7.10 versions. High Unreviewed
CVE-2026-49078 was published Jun 15, 2026
Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce <= 3.1.4 versions. High Unreviewed
CVE-2026-49110 was published Jun 15, 2026
Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions. Moderate Unreviewed
CVE-2026-42657 was published Jun 15, 2026
Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions. High Unreviewed
CVE-2026-45441 was published Jun 15, 2026
python-multipart: Negative Content-Length in parse_form buffers the entire body in memory Low
CVE-2026-53540 was published for python-multipart (pip) Jun 15, 2026
lullu57 Credited to lullu57 and seok-hee97 seok-hee97 seok-hee97
File Browser has a DoS Vulnerability via Public Login API High
CVE-2026-54092 was published for github.com/filebrowser/filebrowser (Go) Jun 12, 2026
AshrafIbrahim03 Credited to AshrafIbrahim03
The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability,... High Unreviewed
CVE-2026-12059 was published Jun 12, 2026
In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation... Moderate Unreviewed
CVE-2026-11596 was published Jun 10, 2026
libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer... High Unreviewed
CVE-2026-53689 was published Jun 10, 2026
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow non... Moderate Unreviewed
CVE-2026-52905 was published Jun 9, 2026
Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product... Critical Unreviewed
CVE-2026-49777 was published Jun 5, 2026
ExifReader is vulnerable to denial of service via crafted ICC `mluc` tag High
CVE-2026-8813 was published for exifreader (npm) May 29, 2026
yuki-matsuhashi Credited to yuki-matsuhashi
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the... Low Unreviewed
CVE-2026-47329 was published May 28, 2026
Keycloak Vulnerable to Improper Validation of Specified Quantity in Input Moderate
CVE-2026-9801 was published for org.keycloak:keycloak-ldap-federation (Maven) May 28, 2026
Keycloak Vulnerable to Improper Validation of Specified Quantity in Input Moderate
CVE-2026-9704 was published for org.keycloak:keycloak-server-spi-private (Maven) May 27, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database