Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,569
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,522
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

368 advisories

Loading
GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create()... High Unreviewed
CVE-2026-78679 was published Aug 25, 2026
GitPython before 3.1.59 fails to disable merge_includes when parsing .gitmodules, allowing... High Unreviewed
CVE-2026-78675 was published Aug 25, 2026
Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file... Moderate Unreviewed
CVE-2026-34967 was published Aug 25, 2026
Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string,... Critical Unreviewed
CVE-2026-56705 was published Aug 25, 2026
exceljs-hardened before 5.0.0 contains a path traversal vulnerability in the Workbook.addImage()... High Unreviewed
CVE-2026-78208 was published Aug 24, 2026
NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and... High Unreviewed
CVE-2026-62385 was published Aug 22, 2026
External Control of File Name or Path in the upload API endpoint of Datiphy Data Management... Critical Unreviewed
CVE-2026-76158 was published Aug 21, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite... Critical Unreviewed
CVE-2026-16926 was published Aug 20, 2026
IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25... Moderate Unreviewed
CVE-2025-36398 was published Aug 20, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco... Critical Unreviewed
CVE-2026-20358 was published Aug 19, 2026
GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout... High Unreviewed
CVE-2026-76217 was published Aug 19, 2026
phpMyFAQ before 4.1.7 does not adequately sanitize HTML in FAQ answers before generating PDFs via... High Unreviewed
CVE-2026-76210 was published Aug 19, 2026
An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app... High Unreviewed
CVE-2026-67920 was published Aug 18, 2026
External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue... Moderate Unreviewed
CVE-2026-18751 was published Aug 18, 2026
grav-plugin-api (getgrav/grav-plugin-api) versions >= 1.0.0-beta.10 and <= 1.0.14 contain a path... High Unreviewed
CVE-2026-75830 was published Aug 18, 2026
openssl_encrypt versions before 1.4.0 contain a path traversal vulnerability in the _is_safe_path... High Unreviewed
CVE-2026-74884 was published Aug 17, 2026
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code... Critical Unreviewed
CVE-2026-17184 was published Aug 14, 2026
External control of file name or path vulnerability in Johnson Controls Airwall allows : File... High Unreviewed
CVE-2026-34492 was published Aug 14, 2026
luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated... Critical Unreviewed
CVE-2026-72842 was published Aug 14, 2026
luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload,... Critical Unreviewed
CVE-2026-72841 was published Aug 14, 2026
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary... Critical Unreviewed
CVE-2026-17482 was published Aug 13, 2026
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to... High Unreviewed
CVE-2026-16987 was published Aug 13, 2026
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership... High Unreviewed
CVE-2026-16898 was published Aug 13, 2026
GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard... High Unreviewed
CVE-2026-73619 was published Aug 13, 2026
PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the... Moderate Unreviewed
CVE-2026-17431 was published Aug 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database