Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,185
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

17,773 advisories

Loading
A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the... Low Unreviewed
CVE-2026-110694 was published Oct 14, 2026
A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function... Low Unreviewed
CVE-2026-110689 was published Oct 14, 2026
A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud... Low Unreviewed
CVE-2026-0311 was published Oct 14, 2026
A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables... Low Unreviewed
CVE-2026-0316 was published Oct 14, 2026
A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated... Low Unreviewed
CVE-2026-0317 was published Oct 14, 2026
Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive... Low Unreviewed
CVE-2026-82153 was published Oct 14, 2026
BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extraction Low
CVE-2026-14966 was published for bbot (pip) Oct 14, 2026
tonghuaroot Credited to tonghuaroot
Apprise forwards configured auth headers across cross-origin HTTP redirects Low
CVE-2026-59180 was published for apprise (pip) Oct 14, 2026
gistrec Credited to gistrec
An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows... Low Unreviewed
CVE-2026-93637 was published Oct 14, 2026
Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image... Low Unreviewed
CVE-2026-110734 was published Oct 14, 2026
Godot Engine through 4.7.2 has a heap out-of-bounds write exists in the binary resource loader ... Low Unreviewed
CVE-2026-110735 was published Oct 14, 2026
Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core... Low Unreviewed
CVE-2026-110736 was published Oct 14, 2026
miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml... Low Unreviewed
CVE-2026-110656 was published Oct 14, 2026
miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml... Low Unreviewed
CVE-2026-110655 was published Oct 14, 2026
ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in... Low Unreviewed
CVE-2026-110627 was published Oct 14, 2026
Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows... Low Unreviewed
CVE-2026-110624 was published Oct 14, 2026
Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml_strtod()... Low Unreviewed
CVE-2026-110604 was published Oct 14, 2026
A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor... Low Unreviewed
CVE-2026-88842 was published Oct 14, 2026
A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer... Low Unreviewed
CVE-2026-73792 was published Oct 14, 2026
A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow. Low Unreviewed
CVE-2026-73791 was published Oct 14, 2026
A malicious actor with access to the network and under certain conditions could exploit a Path... Low Unreviewed
CVE-2026-110457 was published Oct 14, 2026
A malicious actor with access to the network and under certain conditions could exploit a Path... Low Unreviewed
CVE-2026-110458 was published Oct 14, 2026
Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected,... Low Unreviewed
CVE-2026-77205 was published Oct 14, 2026
Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker... Low Unreviewed
CVE-2026-110141 was published Oct 14, 2026
Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich... Low Unreviewed
CVE-2026-110239 was published Oct 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database