Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

767 advisories

Loading
Postiz signs its session, invitation and password reset tokens with one shared secret and without... Critical Unreviewed
CVE-2026-115933 was published Oct 24, 2026
An attendee authentication vulnerability in the email calendar processing of Zimbra Collaboration... Moderate Unreviewed
CVE-2026-93628 was published Oct 23, 2026
An organizer authentication vulnerability in the email calendar processing of Zimbra... Moderate Unreviewed
CVE-2026-93627 was published Oct 23, 2026
An organizer authentication vulnerability in Zimbra Collaboration Suite (ZCS) allows an... Moderate Unreviewed
CVE-2026-93629 was published Oct 23, 2026
The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing.... High Unreviewed
CVE-2025-30052 was published Oct 23, 2026
Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows... Critical Unreviewed
CVE-2022-51026 was published Oct 22, 2026
Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows... Critical Unreviewed
CVE-2026-112241 was published Oct 22, 2026
Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its... High Unreviewed
CVE-2026-114640 was published Oct 22, 2026
The Contest Gallery WordPress plugin before 34.0.1 does not reliably validate the visitor... Moderate Unreviewed
CVE-2026-107447 was published Oct 21, 2026
The Payment Gateway for Idram WordPress plugin before 2.1.6 does not verify the authenticity of... Moderate Unreviewed
CVE-2026-103302 was published Oct 21, 2026
SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass... Critical Unreviewed
CVE-2026-113703 was published Oct 20, 2026
WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows... Critical Unreviewed
CVE-2026-111691 was published Oct 16, 2026
Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that... Moderate Unreviewed
CVE-2026-111623 was published Oct 16, 2026
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The... Critical Unreviewed
CVE-2026-102764 was published Oct 15, 2026
An unauthenticated remote attacker can bypass authentication and gain full access to... Critical Unreviewed
CVE-2026-84731 was published Oct 15, 2026
In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver... High Unreviewed
CVE-2026-110723 was published Oct 15, 2026
holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway... Moderate Unreviewed
CVE-2026-110768 was published Oct 14, 2026
An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress... High Unreviewed
CVE-2026-94197 was published Oct 14, 2026
Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom... High Unreviewed
CVE-2026-96615 was published Oct 14, 2026
Improper access control in Windows NTFS allows an authorized attacker to disclose information... Moderate Unreviewed
CVE-2026-83864 was published Oct 13, 2026
Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to... High Unreviewed
CVE-2026-83845 was published Oct 13, 2026
The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator,... Critical Unreviewed
CVE-2026-75120 was published Oct 13, 2026
No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized... High Unreviewed
CVE-2026-108131 was published Oct 13, 2026
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing... Critical Unreviewed
CVE-2026-105008 was published Oct 13, 2026
Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege Vulnerability High
CVE-2026-70179 was published for Microsoft.AspNetCore.Authentication.Negotiate (NuGet) Oct 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database