Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,185
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

350,298 advisories

Loading
Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server... Moderate Unreviewed
CVE-2026-79680 was published Sep 24, 2026
a vulnerability involving an unchecked search path element in Evope Collector, versions prior to... High Unreviewed
CVE-2026-7169 was published Sep 24, 2026
A security vulnerability has been detected in O2OA up to 9.5.3/10.0.2. This vulnerability affects... Low Unreviewed
CVE-2026-97179 was published Sep 24, 2026
The Spectra Legacy – Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information... Moderate Unreviewed
CVE-2026-16302 was published Sep 24, 2026
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in... Moderate Unreviewed
CVE-2026-19532 was published Sep 24, 2026
The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to unauthorized... Moderate Unreviewed
CVE-2026-3253 was published Sep 24, 2026
A flaw was found in the Admin REST API of Keycloak, an identity and access management solution.... Moderate Unreviewed
CVE-2026-97311 was published Sep 24, 2026
Paessler PRTG Network Monitor before version 26.2.120.1449 is affected by a reflected Cross-Site... Moderate Unreviewed
CVE-2026-4637 was published Sep 24, 2026
PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies... High Unreviewed
CVE-2026-4638 was published Sep 24, 2026
ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS... Moderate Unreviewed
CVE-2026-92905 was published Sep 24, 2026
A missing authorization vulnerability exists in the Task Group APIs of Apache DolphinScheduler.... High Unreviewed
CVE-2026-57590 was published Sep 24, 2026
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is... Moderate Unreviewed
CVE-2026-18335 was published Sep 24, 2026
The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in... Critical Unreviewed
CVE-2026-12227 was published Sep 24, 2026
A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the... High Unreviewed
CVE-2026-97185 was published Sep 24, 2026
Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this... Moderate Unreviewed
CVE-2026-81645 was published Sep 24, 2026
SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. High Unreviewed
CVE-2026-78311 was published Sep 24, 2026
Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. Critical Unreviewed
CVE-2026-78312 was published Sep 24, 2026
Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie:... Moderate Unreviewed
CVE-2026-78310 was published Sep 24, 2026
The YOP Poll plugin for WordPress is vulnerable to Origin Validation Error in all versions up to,... High Unreviewed
CVE-2026-85682 was published Sep 24, 2026
An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote... Moderate Unreviewed
CVE-2026-87739 was published Sep 24, 2026
GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated... Moderate Unreviewed
CVE-2026-97181 was published Sep 24, 2026
Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue... Critical Unreviewed
CVE-2026-78308 was published Sep 24, 2026
SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. High Unreviewed
CVE-2026-78309 was published Sep 24, 2026
The eesy_ID2WP – Publish InDesign HTML5 plugin for WordPress is vulnerable to Path Traversal in... High Unreviewed
CVE-2026-77193 was published Sep 24, 2026
Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. Moderate Unreviewed
CVE-2026-78313 was published Sep 24, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database