Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,603
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

794 advisories

Loading
The Payment Gateway for Telcell WordPress plugin before 2.0.5 does not verify the authenticity of... Moderate Unreviewed
CVE-2026-103301 was published Oct 21, 2026
The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify submitted product prices... Low Unreviewed
CVE-2026-104642 was published Oct 21, 2026
The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify that a PayPal payment... Moderate Unreviewed
CVE-2026-104641 was published Oct 21, 2026
The LatePoint WordPress plugin before 5.7.5 does not validate the client-supplied value that... Moderate Unreviewed
CVE-2026-105256 was published Oct 21, 2026
vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no... High Unreviewed
CVE-2026-114050 was published Oct 21, 2026
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System)... Low Unreviewed
CVE-2026-87414 was published Oct 21, 2026
A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to... High Unreviewed
CVE-2026-43835 was published Oct 20, 2026
LangBot through 4.11.0 contains a missing authenticity verification vulnerability that allows... High Unreviewed
CVE-2026-112265 was published Oct 19, 2026
A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. The... Low Unreviewed
CVE-2026-112101 was published Oct 19, 2026
The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a... Moderate Unreviewed
CVE-2026-86791 was published Oct 19, 2026
MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first... High Unreviewed
CVE-2026-112161 was published Oct 19, 2026
The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its... Moderate Unreviewed
CVE-2026-74922 was published Oct 19, 2026
A flaw was found in bootc and ostree. Already-staged deployments are finalized without... High Unreviewed
CVE-2026-16460 was published Oct 19, 2026
The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not... Moderate Unreviewed
CVE-2026-103311 was published Oct 19, 2026
A flaw was found in bootc when operating with the default containers signature policy. Automatic... High Unreviewed
CVE-2026-16487 was published Oct 19, 2026
ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out) Low
CVE-2026-76894 was published for @aborruso/ckan-mcp-server (npm) Oct 16, 2026
Gal3m Credited to Gal3m and mrostamipoor mrostamipoor mrostamipoor
SGLang through 0.5.21 trusts caller-supplied mm_hashes values as the multimodal prefix-cache key,... Moderate Unreviewed
CVE-2026-111392 was published Oct 16, 2026
Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation Moderate
CVE-2026-102682 was published for pipecat-ai (pip) Oct 15, 2026
infycore Credited to infycore and agent-kira agent-kira agent-kira
The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a... Moderate Unreviewed
CVE-2026-92429 was published Oct 15, 2026
The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a... Moderate Unreviewed
CVE-2026-92428 was published Oct 15, 2026
The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly... Moderate Unreviewed
CVE-2026-103324 was published Oct 15, 2026
BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability... High Unreviewed
CVE-2026-110607 was published Oct 14, 2026
The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was... Moderate Unreviewed
CVE-2026-82844 was published Oct 14, 2026
The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming... Moderate Unreviewed
CVE-2026-88998 was published Oct 14, 2026
The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not verify the authenticity of... Moderate Unreviewed
CVE-2026-103308 was published Oct 14, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database