Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,535
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,515
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

266 advisories

Loading
A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth()... Critical Unreviewed
CVE-2026-12564 was published Aug 18, 2026
A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via... Critical Unreviewed
CVE-2026-50775 was published Aug 17, 2026
Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue... Critical Unreviewed
CVE-2026-69223 was published Aug 11, 2026
A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound... Critical Unreviewed
CVE-2026-19516 was published Aug 11, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker... Critical Unreviewed
CVE-2026-70332 was published Aug 7, 2026
Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery... Critical Unreviewed
CVE-2026-53983 was published Aug 7, 2026
A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier... Critical Unreviewed
CVE-2026-15732 was published Aug 7, 2026
In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources... Critical Unreviewed
CVE-2026-12605 was published Aug 6, 2026
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability... Critical Unreviewed
CVE-2026-48331 was published Aug 4, 2026
Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate... Critical Unreviewed
CVE-2026-57106 was published Jul 24, 2026
Custom query URLs could access internal or reserved network services. Critical Unreviewed
CVE-2026-64873 was published Jul 23, 2026
Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery... Critical Unreviewed
CVE-2026-65318 was published Jul 22, 2026
Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined... Critical Unreviewed
CVE-2026-65317 was published Jul 22, 2026
Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows... Critical Unreviewed
CVE-2026-65057 was published Jul 21, 2026
lmdeploy's OpenAI-compatible API server contains a server-side request forgery vulnerability that... Critical Unreviewed
CVE-2026-63764 was published Jul 21, 2026
stoatchat before 0.13.5 contains an unauthenticated server-side request forgery vulnerability in... Critical Unreviewed
CVE-2026-63306 was published Jul 16, 2026
Adobe Experience Manager is affected by a Server-Side Request Forgery (SSRF) vulnerability that... Critical Unreviewed
CVE-2026-48259 was published Jul 14, 2026
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance... Critical Unreviewed
CVE-2026-15409 was published Jul 14, 2026
Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side... Critical Unreviewed
CVE-2026-13233 was published Jul 11, 2026
A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability... Critical Unreviewed
CVE-2026-15143 was published Jul 10, 2026
Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker... Critical Unreviewed
CVE-2026-56261 was published Jul 10, 2026
A flaw was found in the `guardrails-detectors` component. This vulnerability allows a remote... Critical Unreviewed
CVE-2026-15378 was published Jul 10, 2026
repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that... Critical Unreviewed
CVE-2026-59702 was published Jul 8, 2026
LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models... Critical Unreviewed
CVE-2026-59707 was published Jul 7, 2026
Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an... Critical Unreviewed
CVE-2026-57100 was published Jul 3, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database