Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,556
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,518
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

565 advisories

Loading
OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows... High Unreviewed
CVE-2026-22681 was published Aug 21, 2026
Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url... High Unreviewed
CVE-2026-77775 was published Aug 21, 2026
Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to... High Unreviewed
CVE-2026-69855 was published Aug 21, 2026
SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the... High Unreviewed
CVE-2026-72848 was published Aug 21, 2026
Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to... High Unreviewed
CVE-2026-66800 was published Aug 21, 2026
Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to... High Unreviewed
CVE-2026-69543 was published Aug 21, 2026
A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm... High Unreviewed
CVE-2026-50237 was published Aug 11, 2026
In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka... High Unreviewed
CVE-2026-76402 was published Aug 20, 2026
In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds... High Unreviewed
CVE-2026-76389 was published Aug 20, 2026
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway... High Unreviewed
CVE-2026-76351 was published Aug 20, 2026
The Animation Addons for Elementor WordPress plugin before 2.7.2 does not validate a user... High Unreviewed
CVE-2026-17565 was published Aug 19, 2026
An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User... High Unreviewed
CVE-2026-50236 was published Aug 11, 2026
ArcadeDB before 26.8.1 contains a server-side request forgery vulnerability in the OpenCypher... High Unreviewed
CVE-2026-76225 was published Aug 19, 2026
Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF... High Unreviewed
CVE-2026-54794 was published Aug 19, 2026
AIL Framework contains a server-side request forgery (SSRF) vulnerability in its crawler... High Unreviewed
CVE-2026-76164 was published Aug 19, 2026
A flaw was found in the OpenShift Router. A user with EndpointSlice write access can exploit this... High Unreviewed
CVE-2026-42965 was published May 29, 2026
A server-side request forgery (SSRF) vulnerability was found in AWX's webhook status callback... High Unreviewed
CVE-2026-71365 was published Aug 18, 2026
RAGFlow before 0.26.3 contains a server-side request forgery vulnerability in the agent workflow ... High Unreviewed
CVE-2026-75898 was published Aug 18, 2026
Unauthenticated Server Side Request Forgery (SSRF) in OttoKit <= 1.1.35 versions. High Unreviewed
CVE-2026-32553 was published Aug 18, 2026
Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4... High Unreviewed
CVE-2026-32473 was published Aug 18, 2026
ArcadeDB versions before 26.8.1 contain a server-side request forgery vulnerability in the IMPORT... High Unreviewed
CVE-2026-75844 was published Aug 18, 2026
The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in... High Unreviewed
CVE-2026-6229 was published May 2, 2026
The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in... High Unreviewed
CVE-2026-17123 was published Aug 16, 2026
Budibase before 3.40.0 contains server-side request forgery vulnerabilities in OpenAPI query... High Unreviewed
CVE-2026-72855 was published Aug 14, 2026
Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST ... High Unreviewed
CVE-2026-72777 was published Aug 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database