Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,508
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

151,731 advisories

Loading
Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows... Moderate Unreviewed
CVE-2026-18348 was published Aug 11, 2026
The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could... Moderate Unreviewed
CVE-2026-6505 was published Aug 11, 2026
The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can... Moderate Unreviewed
CVE-2026-6181 was published Aug 11, 2026
The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could... Moderate Unreviewed
CVE-2026-5303 was published Aug 11, 2026
An ACAP configuration file lacks input validation, which could potentially lead to privilege... Moderate Unreviewed
CVE-2026-5304 was published Aug 11, 2026
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is... Moderate Unreviewed
CVE-2026-16974 was published Aug 11, 2026
The Signed Video Framework contained a  buffer overflow issue which could lead the application... Moderate Unreviewed
CVE-2026-8158 was published Aug 11, 2026
A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can... Moderate Unreviewed
CVE-2026-24330 was published Aug 11, 2026
Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP, an... Moderate Unreviewed
CVE-2026-66779 was published Aug 11, 2026
A flaw was found in wildfly-core. A remote user authenticated as an administrative user can... Moderate Unreviewed
CVE-2026-24329 was published Aug 11, 2026
SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to... Moderate Unreviewed
CVE-2026-66778 was published Aug 11, 2026
SAP Approuter does not enforce cross-site request forgery protection on the authentication flow... Moderate Unreviewed
CVE-2026-66775 was published Aug 11, 2026
SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to... Moderate Unreviewed
CVE-2026-66777 was published Aug 11, 2026
SAPUI5 allows a key user with content adaptation privileges to inject malicious script content... Moderate Unreviewed
CVE-2026-66771 was published Aug 11, 2026
SAP Approuter does not consistently enforce integrity verification on certain session-related... Moderate Unreviewed
CVE-2026-66776 was published Aug 11, 2026
A malicious or compromised OData service could disclose sensitive authentication information and... Moderate Unreviewed
CVE-2026-66773 was published Aug 11, 2026
Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could... Moderate Unreviewed
CVE-2026-66770 was published Aug 11, 2026
SAP Approuter does not enforce sufficient flow control in certain functionality. An attacker with... Moderate Unreviewed
CVE-2026-66761 was published Aug 11, 2026
SAP BusinessObjects Business Intelligence Platform (Admin Tools) does not perform sufficient... Moderate Unreviewed
CVE-2026-66772 was published Aug 11, 2026
SAP Approuter does not correctly validate client certificates in certain callback flows. An... Moderate Unreviewed
CVE-2026-66760 was published Aug 11, 2026
Reprocess Bank Statement Items in SAP S/4HANA does not perform the necessary authorization checks... Moderate Unreviewed
CVE-2026-66764 was published Aug 11, 2026
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged... Moderate Unreviewed
CVE-2026-58248 was published Aug 11, 2026
WebSocket of SAP Approuter does not perform sufficient authorization checks in certain... Moderate Unreviewed
CVE-2026-58237 was published Aug 11, 2026
SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to... Moderate Unreviewed
CVE-2026-58236 was published Aug 11, 2026
SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration... Moderate Unreviewed
CVE-2026-58241 was published Aug 11, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database