Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

3,029 advisories

Loading
ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role... High Unreviewed
CVE-2026-106705 was published Oct 16, 2026
mise permits untrusted local configuration to override default shell arguments High
CVE-2026-103929 was published for mise (Rust) Oct 15, 2026
arpitjain099 Credited to arpitjain099
Grafana's data source proxy did not apply role-based access control to write requests forwarded... High Unreviewed
CVE-2026-9703 was published Oct 15, 2026
Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly... High Unreviewed
CVE-2026-107795 was published Oct 15, 2026
A malicious actor with access to the network could exploit an Improper Access Control... High Unreviewed
CVE-2026-110459 was published Oct 14, 2026
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result... High Unreviewed
CVE-2026-100115 was published Oct 14, 2026
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result... High Unreviewed
CVE-2026-100114 was published Oct 14, 2026
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation... High Unreviewed
CVE-2026-105443 was published Oct 13, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate... High Unreviewed
CVE-2026-102860 was published Oct 13, 2026
Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability... High Unreviewed
CVE-2023-54412 was published Oct 13, 2026
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo... High Unreviewed
CVE-2026-18517 was published Oct 12, 2026
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes... High Unreviewed
CVE-2026-18166 was published Oct 12, 2026
PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure High
CVE-2026-61426 was published for praisonai (npm) Oct 8, 2026
dinhvaren Credited to dinhvaren
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco... High Unreviewed
CVE-2026-76463 was published Oct 7, 2026
Backstage: Scaffolder action input authorization bypass High
CVE-2026-106503 was published for @backstage/plugin-scaffolder-backend (npm) Oct 7, 2026
Actual Sync Server: CORS Proxy GitHub API Allowlist Prefix Bypass Leaks Private Repositories Through the Server GitHub Token High
CVE-2026-57449 was published for @actual-app/sync-server (npm) Oct 7, 2026
xIllunight Credited to xIllunight and MatissJanis MatissJanis MatissJanis
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain... High Unreviewed
CVE-2026-97680 was published Oct 7, 2026
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute... High Unreviewed
CVE-2026-104335 was published Oct 7, 2026
An improper access control vulnerability exists in the Android client application for HPE... High Unreviewed
CVE-2026-79797 was published Oct 6, 2026
Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability.... High Unreviewed
CVE-2026-86362 was published Oct 6, 2026
Payload didn't enforce field-level password update restrictions High
CVE-2026-105855 was published for payload (npm) Oct 6, 2026
pavelkohout396 Credited to pavelkohout396
Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator... High Unreviewed
CVE-2026-95263 was published Oct 5, 2026
Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache... High Unreviewed
CVE-2026-102795 was published Oct 2, 2026
TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in... High Unreviewed
CVE-2026-51916 was published Oct 2, 2026
TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the agent... High Unreviewed
CVE-2026-51914 was published Oct 2, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database