Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
64
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,236
pip
5,000+
Pub
14
RubyGems
1,213
Rust
1,627
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,595
Rust
25

37,885 advisories

Loading
Cyrus SASL through 2.1.28 contains an authentication bypass vulnerability in the SRP server... Critical Unreviewed
CVE-2026-129483 was published Nov 15, 2026
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... Critical Unreviewed
CVE-2026-125795 was published Nov 15, 2026
Deserialization of Untrusted Data vulnerability in Barn2 Plugins Document Library Pro document... Critical Unreviewed
CVE-2026-122662 was published Nov 15, 2026
Incorrect Privilege Assignment vulnerability in Nasir Ahmed Advanced Form Integration advanced... Critical Unreviewed
CVE-2026-125769 was published Nov 15, 2026
When authentication caching is enabled on DefaultLdapRealm, after a user logs in successfully... Critical Unreviewed
CVE-2026-129349 was published Nov 15, 2026
A vulnerability was identified in D-Link DSL-6740C 20131126. This affects an unknown function of... Critical Unreviewed
CVE-2026-129444 was published Nov 15, 2026
A flaw has been found in D-Link DIR-600L 2.17b02. Affected by this issue is the function... Critical Unreviewed
CVE-2026-129354 was published Nov 15, 2026
A security vulnerability has been detected in TRENDnet TEW-657BRM 1.00.1. This vulnerability... Critical Unreviewed
CVE-2026-129351 was published Nov 15, 2026
A vulnerability was detected in D-Link DIR-600L 2.17/2.17b02. Affected by this vulnerability is... Critical Unreviewed
CVE-2026-129353 was published Nov 15, 2026
A vulnerability was found in Kingston FURY CTRL RGB Control Software up to 2.0.66.0. The impacted... Critical Unreviewed
CVE-2026-129261 was published Nov 14, 2026
The Shipo plugin for WordPress is vulnerable to Authentication Bypass in versions 1.6 through 1.8... Critical Unreviewed
CVE-2026-19907 was published Nov 14, 2026
Dokploy before 0.31.1 contains an OS command injection vulnerability in... Critical Unreviewed
CVE-2026-129433 was published Nov 14, 2026
A vulnerability was identified in CoolerMaster MASTERPLUS+ 1.9.6. This affects the function... Critical Unreviewed
CVE-2026-129255 was published Nov 14, 2026
The Cloud Storage Manager for Fluent Forms – Google Drive, Dropbox, OneDrive, S3 Uploads plugin... Critical Unreviewed
CVE-2026-120522 was published Nov 14, 2026
The AutomatorWP Pro plugin for WordPress' webhook addon is vulnerable to authorization bypass in... Critical Unreviewed
CVE-2026-126173 was published Nov 14, 2026
Control Web Panel (CWP) before webpanel_version 1.30.6 contains an authorization bypass... Critical Unreviewed
CVE-2026-124021 was published Nov 14, 2026
Control Web Panel (CWP) before webpanel_version 1.30.6 contains a host header injection... Critical Unreviewed
CVE-2026-124020 was published Nov 14, 2026
VITEC EZ TV Platform Server before 8.5.0 contains an unrestricted file upload vulnerability in... Critical Unreviewed
CVE-2026-82504 was published Nov 13, 2026
Tactical RMM 0.17.0 through 1.6.1 contains an arbitrary file read in the /reporting/templates... Critical Unreviewed
CVE-2026-129165 was published Nov 13, 2026
NginxPulse 1.5.0 before 1.6.26 contains an unauthenticated sql injection vulnerability that... Critical Unreviewed
CVE-2026-129171 was published Nov 13, 2026
Dromara free-fs 2.0.1 through 2.3.1 contains an improper restriction of authentication attempts... Critical Unreviewed
CVE-2026-129161 was published Nov 13, 2026
Seafile SeaDoc converter 2.0.4 before 2.0.11 and 3.0.0 before 3.0.8 contains an absolute path... Critical Unreviewed
CVE-2026-129167 was published Nov 13, 2026
A prompt injection vulnerability in all versions of Jet Admin Cloud Platform allows a remote... Critical Unreviewed
CVE-2026-123965 was published Nov 13, 2026
C-Kermit 6.0.192 before 11.1.515 contains a remote code execution vulnerability that allows... Critical Unreviewed
CVE-2026-129125 was published Nov 13, 2026
C-Kermit before 11.1.515 contains an OS command injection vulnerability that allows remote... Critical Unreviewed
CVE-2026-129124 was published Nov 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database