Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

2,643 advisories

Loading
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2026-92715 was published Oct 17, 2026
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is... High Unreviewed
CVE-2026-107762 was published Oct 17, 2026
LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability... High Unreviewed
CVE-2026-111722 was published Oct 16, 2026
Arkon through 0.9.2 contains a missing authorization vulnerability in list_skill_versions that... Moderate Unreviewed
CVE-2026-111717 was published Oct 16, 2026
Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated... Moderate Unreviewed
CVE-2026-111721 was published Oct 16, 2026
99AI through 4.3.0 contains an insecure direct object reference vulnerability that allows... Moderate Unreviewed
CVE-2026-111707 was published Oct 16, 2026
Arkon through 0.9.2 contains a missing authorization vulnerability in GET /api/wiki/graph that... Moderate Unreviewed
CVE-2026-111715 was published Oct 16, 2026
WhaTicket Community through commit cf04795 contains an insecure direct object reference... Moderate Unreviewed
CVE-2026-111709 was published Oct 16, 2026
Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated... Moderate Unreviewed
CVE-2026-111716 was published Oct 16, 2026
Fuint through commit 57ec018 contains an insecure direct object reference vulnerability that... Moderate Unreviewed
CVE-2026-111705 was published Oct 16, 2026
ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that... High Unreviewed
CVE-2026-111702 was published Oct 16, 2026
HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp... High Unreviewed
CVE-2026-111698 was published Oct 16, 2026
yshop-crm through 2.1.3 contains an insecure direct object reference vulnerability that allows... Moderate Unreviewed
CVE-2026-111703 was published Oct 16, 2026
Shaiwz data-platform-open through commit efeacd3 contains an insecure direct object reference... High Unreviewed
CVE-2026-111695 was published Oct 16, 2026
HUIZHI ChargeOS cloud through 3.0.9 contains an insecure direct object reference vulnerability in... High Unreviewed
CVE-2026-111697 was published Oct 16, 2026
Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows... Moderate Unreviewed
CVE-2026-111689 was published Oct 16, 2026
Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated... High Unreviewed
CVE-2026-111684 was published Oct 16, 2026
APIPark through 1.9.7-beta contains an authorization bypass vulnerability that allows... High Unreviewed
CVE-2026-111680 was published Oct 16, 2026
Cube-studio through 2026.09.01 contains an insecure direct object reference vulnerability that... High Unreviewed
CVE-2026-111671 was published Oct 16, 2026
Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability that allows... Moderate Unreviewed
CVE-2026-111676 was published Oct 16, 2026
Cube-studio through 2026.09.01 contains a missing authorization vulnerability in myapp/views... Moderate Unreviewed
CVE-2026-111672 was published Oct 16, 2026
Tbed through 20240319 contains a missing authorization vulnerability that allows any... Moderate Unreviewed
CVE-2026-111674 was published Oct 16, 2026
REBUILD through 4.5.0 contains a missing authorization vulnerability in TaskCommentController... Moderate Unreviewed
CVE-2026-111667 was published Oct 16, 2026
ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference... Moderate Unreviewed
CVE-2026-111655 was published Oct 16, 2026
Risesoft Digital-Infrastructure through 9.6.11 contains a missing authorization vulnerability in... High Unreviewed
CVE-2026-111651 was published Oct 16, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database