Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
45
GitHub Actions
47
Go
3,309
Maven
5,000+
npm
5,000+
NuGet
876
pip
4,530
Pub
12
RubyGems
1,009
Rust
1,195
Swift
51
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

141,206 advisories

Loading
A vulnerability was identified in kalcaddle kodbox 1.64. This issue affects the function Add of... Moderate Unreviewed
CVE-2026-4830 was published Mar 26, 2026
A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function... Moderate Unreviewed
CVE-2026-4833 was published Mar 26, 2026
A security flaw has been discovered in kalcaddle kodbox 1.64. Impacted is the function can of the... Moderate Unreviewed
CVE-2026-4831 was published Mar 26, 2026
A security vulnerability has been detected in code-projects Accounting System 1.0. Impacted is an... Moderate Unreviewed
CVE-2026-4835 was published Mar 26, 2026
A vulnerability was detected in code-projects Accounting System 1.0. The affected element is an... Moderate Unreviewed
CVE-2026-4836 was published Mar 26, 2026
A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This... Moderate Unreviewed
CVE-2026-4826 was published Mar 26, 2026
A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an... Moderate Unreviewed
CVE-2026-4825 was published Mar 26, 2026
IBM Knowledge Catalog Standard Cartridge 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.1, 5.1.1, 5,1.2, 5.1.3, 5... Moderate Unreviewed
CVE-2025-36187 was published Mar 26, 2026
IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an... Moderate Unreviewed
CVE-2025-14684 was published Mar 26, 2026
IBM Concert 1.0.0 through 2.2.0 could allow a local user to obtain sensitive information due to... Moderate Unreviewed
CVE-2025-36440 was published Mar 25, 2026
IBM Concert 1.0.0 through 2.2.0 uses weaker than expected cryptographic algorithms that could... Moderate Unreviewed
CVE-2025-64647 was published Mar 25, 2026
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application... Moderate Unreviewed
CVE-2026-1561 was published Mar 25, 2026
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to cross-site scripting... Moderate Unreviewed
CVE-2026-2483 was published Mar 25, 2026
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to exposure of... Moderate Unreviewed
CVE-2026-1014 was published Mar 25, 2026
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application... Moderate Unreviewed
CVE-2025-14915 was published Mar 25, 2026
IBM Concert 1.0.0 through 2.2.0 could allow an attacker to access sensitive information in memory... Moderate Unreviewed
CVE-2025-64646 was published Mar 25, 2026
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application... Moderate Unreviewed
CVE-2025-14917 was published Mar 25, 2026
IBM Concert 1.0.0 through 2.2.0 transmits data in clear text that could allow an attacker to... Moderate Unreviewed
CVE-2025-64648 was published Mar 25, 2026
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable due to Insecure Direct... Moderate Unreviewed
CVE-2025-14974 was published Mar 25, 2026
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request... Moderate Unreviewed
CVE-2026-1015 was published Mar 25, 2026
IBM Concert 1.0.0 through 2.2.0 could allow a privileged user to perform unauthorized actions due... Moderate Unreviewed
CVE-2025-36438 was published Mar 25, 2026
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request... Moderate Unreviewed
CVE-2025-14912 was published Mar 25, 2026
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information... Moderate Unreviewed
CVE-2026-2484 was published Mar 25, 2026
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 IBM InfoSphere DataStage Flow... Moderate Unreviewed
CVE-2025-36422 was published Mar 25, 2026
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information... Moderate Unreviewed
CVE-2026-1262 was published Mar 25, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database