Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

7,230 advisories

Loading
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to... Moderate Unreviewed
CVE-2026-17073 was published Oct 16, 2026
ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role... High Unreviewed
CVE-2026-106705 was published Oct 16, 2026
Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enforce the per-user... Moderate Unreviewed
CVE-2026-111388 was published Oct 16, 2026
Backstage: Improper access control in backend action invocation Moderate
CVE-2026-106495 was published for @backstage/backend-defaults (npm) Oct 15, 2026
mise permits untrusted local configuration to override default shell arguments High
CVE-2026-103929 was published for mise (Rust) Oct 15, 2026
arpitjain099 Credited to arpitjain099
An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain... Moderate Unreviewed
CVE-2026-95180 was published Oct 15, 2026
Grafana's data source proxy did not apply role-based access control to write requests forwarded... High Unreviewed
CVE-2026-9703 was published Oct 15, 2026
The Spin Wheel WordPress plugin before 2.2.1 does not verify that a visitor actually performed a... Moderate Unreviewed
CVE-2026-106031 was published Oct 15, 2026
Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly... High Unreviewed
CVE-2026-107795 was published Oct 15, 2026
Gitea's web attachment handler skips its cross-repository ownership check for attachments created... Unknown Unreviewed
CVE-2026-78433 was published Oct 14, 2026
The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely... Moderate Unreviewed
CVE-2026-101301 was published Oct 14, 2026
The EmbedPress WordPress plugin before 4.6.8 does not perform any capability or nonce check on... Moderate Unreviewed
CVE-2026-85000 was published Oct 14, 2026
The Trust Payments Gateway for WooCommerce WordPress plugin before 3.1.0 does not verify the... Moderate Unreviewed
CVE-2026-87843 was published Oct 14, 2026
The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce... Moderate Unreviewed
CVE-2026-87968 was published Oct 14, 2026
A malicious actor with access to the network could exploit an Improper Access Control... High Unreviewed
CVE-2026-110459 was published Oct 14, 2026
A malicious actor with access to the network could exploit an Improper Access Control... Moderate Unreviewed
CVE-2026-110454 was published Oct 14, 2026
A malicious actor with access to the network and under certain conditions could exploit an... Moderate Unreviewed
CVE-2026-110456 was published Oct 14, 2026
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result... High Unreviewed
CVE-2026-100115 was published Oct 14, 2026
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result... High Unreviewed
CVE-2026-100114 was published Oct 14, 2026
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an... Critical Unreviewed
CVE-2026-93895 was published Oct 13, 2026
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation... High Unreviewed
CVE-2026-105443 was published Oct 13, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose... Moderate Unreviewed
CVE-2026-70217 was published Oct 13, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate... High Unreviewed
CVE-2026-102860 was published Oct 13, 2026
ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue... Critical Unreviewed
CVE-2024-34320 was published Oct 13, 2026
A security flaw has been discovered in SourceCodester Library Management System 1.0. This... Moderate Unreviewed
CVE-2026-108975 was published Oct 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database