Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,603
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

365 advisories

Loading
Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability... Moderate Unreviewed
CVE-2026-115382 was published Oct 22, 2026
Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified... Moderate Unreviewed
CVE-2026-111828 was published Oct 19, 2026
An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an... Low Unreviewed
CVE-2026-112112 was published Oct 19, 2026
swoosh has email-derived URL path injection in Microsoft Graph endpoint Low
CVE-2026-54893 was published for swoosh (Erlang) Oct 16, 2026
PJUllrich Credited to PJUllrich, maennchen, and princemaple maennchen maennchen
princemaple princemaple
Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Booking and... Moderate Unreviewed
CVE-2026-103350 was published Oct 15, 2026
An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon ... High Unreviewed
CVE-2026-101952 was published Oct 14, 2026
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol... High Unreviewed
CVE-2026-102067 was published Oct 14, 2026
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol... High Unreviewed
CVE-2026-102184 was published Oct 14, 2026
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol... High Unreviewed
CVE-2026-102183 was published Oct 14, 2026
A Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon... High Unreviewed
CVE-2026-102066 was published Oct 14, 2026
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol... High Unreviewed
CVE-2026-102065 was published Oct 14, 2026
An Improper Validation of Specified Quantity in Input vulnerability in l2ald of Juniper Networks... High Unreviewed
CVE-2026-102033 was published Oct 14, 2026
An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper... High Unreviewed
CVE-2026-102019 was published Oct 14, 2026
An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper... High Unreviewed
CVE-2026-102016 was published Oct 14, 2026
A Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon... High Unreviewed
CVE-2026-101985 was published Oct 14, 2026
An Improper Validation of Specified Quantity in Input vulnerability in the l2ald of Juniper... Moderate Unreviewed
CVE-2026-101995 was published Oct 14, 2026
modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers... High Unreviewed
CVE-2026-109380 was published Oct 12, 2026
Improper Validation of Specified Quantity in Input vulnerability in WP Desk Flexible Quantity –... Moderate Unreviewed
CVE-2026-106605 was published Oct 12, 2026
Improper Validation of Specified Quantity in Input vulnerability in VideoWhisper.com Paid... Moderate Unreviewed
CVE-2026-107429 was published Oct 12, 2026
Subscriber Bypass Vulnerability in MicroPayments <= 3.2.9 versions. Moderate Unreviewed
CVE-2026-107434 was published Oct 10, 2026
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data... Moderate Unreviewed
CVE-2026-107565 was published Oct 8, 2026
vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features Moderate
CVE-2026-105754 was published for vllm (pip) Oct 5, 2026
KernelClint Credited to KernelClint and jperezdealgaba jperezdealgaba jperezdealgaba
Improper Validation of Specified Quantity in Input vulnerability in VillaTheme BuildKit – Product... Moderate Unreviewed
CVE-2026-97275 was published Oct 5, 2026
Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking... Moderate Unreviewed
CVE-2026-103351 was published Oct 5, 2026
Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows... High Unreviewed
CVE-2026-103065 was published Oct 3, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database