Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,185
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

7,220 advisories

Loading
The Spin Wheel WordPress plugin before 2.2.1 does not verify that a visitor actually performed a... Moderate Unreviewed
CVE-2026-106031 was published Oct 15, 2026
The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during... Moderate Unreviewed
CVE-2025-1390 was published Feb 18, 2025
In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied.... Moderate Unreviewed
CVE-2023-51384 was published Dec 18, 2023
ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop... Critical Unreviewed
CVE-2023-28531 was published Mar 17, 2023
Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly... High Unreviewed
CVE-2026-107795 was published Oct 15, 2026
ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue... Critical Unreviewed
CVE-2024-34320 was published Oct 13, 2026
The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce... Moderate Unreviewed
CVE-2026-87968 was published Oct 14, 2026
Gitea's web attachment handler skips its cross-repository ownership check for attachments created... Unknown Unreviewed
CVE-2026-78433 was published Oct 14, 2026
The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely... Moderate Unreviewed
CVE-2026-101301 was published Oct 14, 2026
The EmbedPress WordPress plugin before 4.6.8 does not perform any capability or nonce check on... Moderate Unreviewed
CVE-2026-85000 was published Oct 14, 2026
The Trust Payments Gateway for WooCommerce WordPress plugin before 3.1.0 does not verify the... Moderate Unreviewed
CVE-2026-87843 was published Oct 14, 2026
A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel... High Unreviewed
CVE-2021-4037 was published Aug 25, 2022
A malicious actor with access to the network could exploit an Improper Access Control... High Unreviewed
CVE-2026-110459 was published Oct 14, 2026
A malicious actor with access to the network could exploit an Improper Access Control... Moderate Unreviewed
CVE-2026-110454 was published Oct 14, 2026
A malicious actor with access to the network and under certain conditions could exploit an... Moderate Unreviewed
CVE-2026-110456 was published Oct 14, 2026
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result... High Unreviewed
CVE-2026-100115 was published Oct 14, 2026
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result... High Unreviewed
CVE-2026-100114 was published Oct 14, 2026
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an... Critical Unreviewed
CVE-2026-93895 was published Oct 13, 2026
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation... High Unreviewed
CVE-2026-105443 was published Oct 13, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose... Moderate Unreviewed
CVE-2026-70217 was published Oct 13, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate... High Unreviewed
CVE-2026-102860 was published Oct 13, 2026
A security flaw has been discovered in SourceCodester Library Management System 1.0. This... Moderate Unreviewed
CVE-2026-108975 was published Oct 13, 2026
A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function... Moderate Unreviewed
CVE-2026-108974 was published Oct 13, 2026
A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this... Moderate Unreviewed
CVE-2026-108973 was published Oct 13, 2026
Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability... High Unreviewed
CVE-2023-54412 was published Oct 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database