Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,608
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

29,706 advisories

Loading
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown... Critical Unreviewed
CVE-2026-82971 was published Sep 1, 2026
Unauthenticated PHP Object Injection in Tickera <= 3.6.0.2 versions. Critical Unreviewed
CVE-2026-82226 was published Aug 31, 2026
Unauthenticated SQL Injection in WP Data Access <= 5.5.81 versions. Critical Unreviewed
CVE-2026-81293 was published Aug 31, 2026
Unauthenticated SQL Injection in Throws SPAM Away <= 3.8.2 versions. Critical Unreviewed
CVE-2026-81763 was published Aug 31, 2026
Unauthenticated Arbitrary File Upload in Hash Form <= 1.4.2 versions. Critical Unreviewed
CVE-2026-81780 was published Aug 31, 2026
Improper Validation of Specified Quantity in Input vulnerability in Silk Themes Newspapers X... Critical Unreviewed
CVE-2026-81779 was published Aug 31, 2026
Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms <= 5.1.24 versions. Critical Unreviewed
CVE-2026-81756 was published Aug 31, 2026
The Grav API plugin (getgrav/grav-plugin-api) before 1.0.18 does not apply the API-key scope cap... Critical Unreviewed
CVE-2026-80204 was published Aug 31, 2026
Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute(),... Critical Unreviewed
CVE-2026-80202 was published Aug 31, 2026
Incorrect access control in the NTPSyncWithHost function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51725 was published Aug 31, 2026
Incorrect access control in the delWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51730 was published Aug 31, 2026
Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu... Critical Unreviewed
CVE-2026-51720 was published Aug 31, 2026
The affected Ebyte product uses a deprecated hashing algorithm in an authentication-related ... Critical Unreviewed
CVE-2026-76133 was published Aug 31, 2026
The affected Ebyte product's vendor configuration utility permits access to administrative ... Critical Unreviewed
CVE-2026-73819 was published Aug 31, 2026
Unrestricted Upload of File with Dangerous Type vulnerability in WP Legal Pages WP Cookie Notice... Critical Unreviewed
CVE-2026-82970 was published Aug 31, 2026
Improper neutralization of special elements used in an OS command ('OS command injection')... Critical Unreviewed
CVE-2026-59111 was published Aug 31, 2026
ProfilePress (wp-user-avatar) WordPress plugin before 4.17.2 contains an unauthenticated remote... Critical Unreviewed
CVE-2026-66047 was published Aug 31, 2026
Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015... Critical Unreviewed
CVE-2026-51679 was published Aug 31, 2026
Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows... Critical Unreviewed
CVE-2026-51680 was published Aug 31, 2026
Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows... Critical Unreviewed
CVE-2026-51681 was published Aug 31, 2026
A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the... Critical Unreviewed
CVE-2026-82693 was published Aug 31, 2026
A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of... Critical Unreviewed
CVE-2026-82695 was published Aug 31, 2026
A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function... Critical Unreviewed
CVE-2026-82694 was published Aug 31, 2026
Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded... Critical Unreviewed
CVE-2026-82876 was published Aug 31, 2026
Attackers can exploit command injection vulnerabilities to delete core system runtime files,... Critical Unreviewed
CVE-2026-49003 was published Aug 31, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database