Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,185
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

350,181 advisories

Loading
A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote ... Moderate Unreviewed
CVE-2026-76656 was published Oct 15, 2026
A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data. High Unreviewed
CVE-2026-76661 was published Oct 15, 2026
A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an... High Unreviewed
CVE-2026-76659 was published Oct 15, 2026
Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS... High Unreviewed
CVE-2026-110908 was published Oct 15, 2026
MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to... High Unreviewed
CVE-2026-77931 was published Oct 15, 2026
Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP... Moderate Unreviewed
CVE-2026-110909 was published Oct 15, 2026
IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor... High Unreviewed
CVE-2026-76066 was published Oct 15, 2026
Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a... High Unreviewed
CVE-2026-110907 was published Oct 15, 2026
A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption... High Unreviewed
CVE-2026-76663 was published Oct 15, 2026
A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS. Moderate Unreviewed
CVE-2026-76662 was published Oct 15, 2026
A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data. High Unreviewed
CVE-2026-76660 was published Oct 15, 2026
SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that... High Unreviewed
CVE-2026-0993 was published Oct 15, 2026
ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as... Moderate Unreviewed
CVE-2026-110904 was published Oct 15, 2026
Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection... High Unreviewed
CVE-2026-109430 was published Oct 15, 2026
A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function... Low Unreviewed
CVE-2026-110810 was published Oct 15, 2026
A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption High Unreviewed
CVE-2026-73799 was published Oct 15, 2026
Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to... High Unreviewed
CVE-2026-110868 was published Oct 15, 2026
Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its... Moderate Unreviewed
CVE-2026-110870 was published Oct 15, 2026
Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in... Critical Unreviewed
CVE-2026-110864 was published Oct 15, 2026
Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows... Moderate Unreviewed
CVE-2026-110866 was published Oct 15, 2026
Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared... High Unreviewed
CVE-2026-110873 was published Oct 15, 2026
Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass... High Unreviewed
CVE-2026-110863 was published Oct 15, 2026
Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection... High Unreviewed
CVE-2026-110869 was published Oct 15, 2026
Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser... High Unreviewed
CVE-2026-110871 was published Oct 15, 2026
Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users... High Unreviewed
CVE-2026-110865 was published Oct 15, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database