Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,185
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

7,219 advisories

Loading
Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly... High Unreviewed
CVE-2026-107795 was published Oct 15, 2026
Gitea's web attachment handler skips its cross-repository ownership check for attachments created... Unknown Unreviewed
CVE-2026-78433 was published Oct 14, 2026
The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely... Moderate Unreviewed
CVE-2026-101301 was published Oct 14, 2026
The EmbedPress WordPress plugin before 4.6.8 does not perform any capability or nonce check on... Moderate Unreviewed
CVE-2026-85000 was published Oct 14, 2026
The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce... Moderate Unreviewed
CVE-2026-87968 was published Oct 14, 2026
The Trust Payments Gateway for WooCommerce WordPress plugin before 3.1.0 does not verify the... Moderate Unreviewed
CVE-2026-87843 was published Oct 14, 2026
A malicious actor with access to the network could exploit an Improper Access Control... High Unreviewed
CVE-2026-110459 was published Oct 14, 2026
A malicious actor with access to the network could exploit an Improper Access Control... Moderate Unreviewed
CVE-2026-110454 was published Oct 14, 2026
A malicious actor with access to the network and under certain conditions could exploit an... Moderate Unreviewed
CVE-2026-110456 was published Oct 14, 2026
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result... High Unreviewed
CVE-2026-100114 was published Oct 14, 2026
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result... High Unreviewed
CVE-2026-100115 was published Oct 14, 2026
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an... Critical Unreviewed
CVE-2026-93895 was published Oct 13, 2026
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation... High Unreviewed
CVE-2026-105443 was published Oct 13, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose... Moderate Unreviewed
CVE-2026-70217 was published Oct 13, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate... High Unreviewed
CVE-2026-102860 was published Oct 13, 2026
ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue... Critical Unreviewed
CVE-2024-34320 was published Oct 13, 2026
A security flaw has been discovered in SourceCodester Library Management System 1.0. This... Moderate Unreviewed
CVE-2026-108975 was published Oct 13, 2026
A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this... Moderate Unreviewed
CVE-2026-108973 was published Oct 13, 2026
A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function... Moderate Unreviewed
CVE-2026-108974 was published Oct 13, 2026
Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability... High Unreviewed
CVE-2023-54412 was published Oct 13, 2026
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo... High Unreviewed
CVE-2026-18517 was published Oct 12, 2026
A flaw has been found in KusalkaSilva Learning-Management-System up to... Low Unreviewed
CVE-2026-108922 was published Oct 12, 2026
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes... High Unreviewed
CVE-2026-18166 was published Oct 12, 2026
A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted... Low Unreviewed
CVE-2026-108801 was published Oct 12, 2026
Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2.6.0) Moderate
GHSA-pjr3-86v4-5p7w was published for code.vikunja.io/api (Go) Oct 9, 2026
Viv3kGupt4 Credited to Viv3kGupt4
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database