Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,608
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

330,259 advisories

Loading
A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and... High Unreviewed
CVE-2026-83524 was published Sep 1, 2026
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown... Critical Unreviewed
CVE-2026-82971 was published Sep 1, 2026
A vulnerability was found in hyperledger-firefly firefly up to 1.4.0. The impacted element is the... Moderate Unreviewed
CVE-2026-82957 was published Sep 1, 2026
A security vulnerability has been detected in ShopEx ECShop up to 2.5.1. This vulnerability... Moderate Unreviewed
CVE-2026-82922 was published Sep 1, 2026
A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function... High Unreviewed
CVE-2026-82954 was published Sep 1, 2026
Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token... High Unreviewed
CVE-2026-82882 was published Sep 1, 2026
A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function... Moderate Unreviewed
CVE-2026-82921 was published Sep 1, 2026
Unauthenticated Cross Site Scripting (XSS) in SliceWP <= 1.2.10 versions. High Unreviewed
CVE-2026-82224 was published Aug 31, 2026
Unauthenticated Cross Site Scripting (XSS) in RegistrationMagic <= 6.0.9.8 versions. High Unreviewed
CVE-2026-82221 was published Aug 31, 2026
Unauthenticated PHP Object Injection in Tickera <= 3.6.0.2 versions. Critical Unreviewed
CVE-2026-82226 was published Aug 31, 2026
Unauthenticated Server Side Request Forgery (SSRF) in MapSVG <= 8.15.0 versions. Moderate Unreviewed
CVE-2026-82852 was published Aug 31, 2026
A vulnerability was identified in cu silicon up to 0.1.5. Affected by this vulnerability is the... Moderate Unreviewed
CVE-2026-82919 was published Aug 31, 2026
A flaw has been found in sdcb chats up to 1.12.0. This impacts the function DownloadPublic of the... Low Unreviewed
CVE-2026-82906 was published Aug 31, 2026
Unauthenticated Bypass Vulnerability in SiteGround Security <= 1.6.6 versions. High Unreviewed
CVE-2026-82228 was published Aug 31, 2026
A potential security vulnerability has been identified in the HP ImageDiags for versions prior to... High Unreviewed
CVE-2026-82346 was published Aug 31, 2026
Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.9.8 versions. High Unreviewed
CVE-2026-82225 was published Aug 31, 2026
A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is... High Unreviewed
CVE-2026-82908 was published Aug 31, 2026
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.2 versions. High Unreviewed
CVE-2026-82229 was published Aug 31, 2026
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due... High Unreviewed
CVE-2026-83596 was published Aug 31, 2026
A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This... Moderate Unreviewed
CVE-2026-82914 was published Aug 31, 2026
A vulnerability was determined in QuantumNous new-api up to 1.0.0-rc.15. Affected by this issue... Low Unreviewed
CVE-2026-82909 was published Aug 31, 2026
Subscriber SQL Injection in Charitable <= 1.8.12.1 versions. High Unreviewed
CVE-2026-81287 was published Aug 31, 2026
Unauthenticated Cross Site Scripting (XSS) in Email Essentials <= 6.0.6 versions. High Unreviewed
CVE-2026-81764 was published Aug 31, 2026
Unauthenticated SQL Injection in WP Data Access <= 5.5.81 versions. Critical Unreviewed
CVE-2026-81293 was published Aug 31, 2026
Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack <= 6.2.12 versions. High Unreviewed
CVE-2026-81297 was published Aug 31, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database