Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
47
GitHub Actions
48
Go
3,378
Maven
5,000+
npm
5,000+
NuGet
881
pip
4,573
Pub
13
RubyGems
1,013
Rust
1,205
Swift
51
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

295,796 advisories

Loading
A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. This... Moderate Unreviewed
CVE-2026-5240 was published Apr 1, 2026
A weakness has been identified in itsourcecode Payroll Management System 1.0. Affected by this... Moderate Unreviewed
CVE-2026-5238 was published Apr 1, 2026
A security flaw has been discovered in itsourcecode Payroll Management System 1.0. Affected by... Moderate Unreviewed
CVE-2026-5237 was published Apr 1, 2026
A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641. Affected is the function... Moderate Unreviewed
CVE-2026-5236 was published Apr 1, 2026
The Booking for Appointments and Events Calendar - Amelia plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2026-4668 was published Apr 1, 2026
A vulnerability was determined in Axiomatic Bento4 up to 1.6.0-641. This impacts the function... Moderate Unreviewed
CVE-2026-5235 was published Apr 1, 2026
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW,... High Unreviewed
CVE-2026-5214 was published Apr 1, 2026
The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross... Moderate Unreviewed
CVE-2026-2480 was published Apr 1, 2026
A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS... Moderate Unreviewed
CVE-2026-5215 was published Apr 1, 2026
A vulnerability exists in the SonicWall Email Security appliance due to improper input... Low Unreviewed
CVE-2026-3470 was published Mar 31, 2026
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS... High Unreviewed
CVE-2026-5212 was published Mar 31, 2026
A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email... Moderate Unreviewed
CVE-2026-3468 was published Mar 31, 2026
A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall... Low Unreviewed
CVE-2026-3469 was published Mar 31, 2026
A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS... High Unreviewed
CVE-2026-5213 was published Mar 31, 2026
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS... High Unreviewed
CVE-2026-5211 was published Mar 31, 2026
The MAVLink communication protocol does not require cryptographic authentication by default.... Critical Unreviewed
CVE-2026-1579 was published Mar 31, 2026
A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to... Unknown Unreviewed
CVE-2026-30521 was published Mar 31, 2026
An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows... Unknown Unreviewed
CVE-2026-30290 was published Mar 31, 2026
An arbitrary file overwrite vulnerability in RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play... Unknown Unreviewed
CVE-2026-30280 was published Mar 31, 2026
A security vulnerability has been detected in SourceCodester Leave Application System 1.0.... Moderate Unreviewed
CVE-2026-5209 was published Mar 31, 2026
The MS27102A Remote Spectrum Monitor is vulnerable to an authentication bypass that allows... Critical Unreviewed
CVE-2026-3356 was published Mar 31, 2026
An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows... Unknown Unreviewed
CVE-2026-30285 was published Mar 31, 2026
A vulnerability was detected in SourceCodester Leave Application System 1.0. This affects an... Moderate Unreviewed
CVE-2026-5210 was published Mar 31, 2026
An arbitrary file overwrite vulnerability in Funambol, Inc. Zefiro Cloud v32.0.2026011614 allows... Unknown Unreviewed
CVE-2026-30286 was published Mar 31, 2026
An arbitrary file overwrite vulnerability in PEAKSEL D.O.O. NIS Animal Sounds and Ringtones v1.3... Unknown Unreviewed
CVE-2026-30283 was published Mar 31, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database