Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,683
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,532
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

123 advisories

Loading
DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an... Moderate Unreviewed
CVE-2026-59317 was published Aug 27, 2026
Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions. Moderate Unreviewed
CVE-2026-66679 was published Aug 18, 2026
An improper access control vulnerability exists where an authenticated non-administrative... Moderate Unreviewed
CVE-2026-19639 was published Aug 14, 2026
Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie... Moderate Unreviewed
CVE-2026-19518 was published Aug 11, 2026
GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory()... Moderate Unreviewed
CVE-2026-71394 was published Aug 10, 2026
Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Payment –... Moderate Unreviewed
CVE-2026-57364 was published Jul 13, 2026
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments,... Moderate Unreviewed
CVE-2026-59997 was published Jul 8, 2026
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes... Moderate Unreviewed
CVE-2026-11906 was published Jun 30, 2026
GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode... Moderate Unreviewed
CVE-2026-57053 was published Jun 23, 2026
NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilfs_sb_is_valid() function fails to... Moderate Unreviewed
CVE-2026-55392 was published Jun 18, 2026
sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass... Moderate Unreviewed
CVE-2026-55706 was published Jun 17, 2026
Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions. Moderate Unreviewed
CVE-2026-42657 was published Jun 15, 2026
In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation... Moderate Unreviewed
CVE-2026-11596 was published Jun 10, 2026
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow non... Moderate Unreviewed
CVE-2026-52905 was published Jun 9, 2026
IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by... Moderate Unreviewed
CVE-2026-7254 was published May 27, 2026
IBM Cloud APM, Base Private 8.1.4 and IBM Cloud APM, Advanced Private 8.1.4 IBM Db2 for Linux,... Moderate Unreviewed
CVE-2026-3676 was published May 27, 2026
Improper Validation of Specified Quantity in Input vulnerability in Ads by WPQuads Ads by WPQuads... Moderate Unreviewed
CVE-2026-42744 was published May 27, 2026
Improper Validation of Specified Quantity in Input vulnerability in Ads by WPQuads Ads by WPQuads... Moderate Unreviewed
CVE-2026-42732 was published May 27, 2026
Ledger Nano X, Flex, and Stax devices contain a denial of service vulnerability in the MCU... Moderate Unreviewed
CVE-2025-15645 was published May 20, 2026
An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the... Moderate Unreviewed
CVE-2025-70071 was published May 4, 2026
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes... Moderate Unreviewed
CVE-2026-1577 was published May 1, 2026
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes... Moderate Unreviewed
CVE-2025-14688 was published May 1, 2026
An authorization flaw in the user management command could allow an authenticated user to make... Moderate Unreviewed
CVE-2026-6915 was published Apr 29, 2026
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes... Moderate Unreviewed
CVE-2026-1352 was published Apr 23, 2026
Improper validation of STRING tensor offsets could allows malformed string metadata to trigger... Moderate Unreviewed
CVE-2026-6839 was published Apr 22, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database