Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
41
GitHub Actions
41
Go
3,092
Maven
5,000+
npm
4,981
NuGet
825
pip
4,419
Pub
12
RubyGems
988
Rust
1,163
Swift
50
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

292,241 advisories

Loading
Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute... Unknown Unreviewed
CVE-2026-26377 was published Mar 5, 2026
Missing Authorization, Missing Authentication for Critical Function vulnerability in rustdesk... High Unreviewed
CVE-2026-30784 was published Mar 5, 2026
Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client... High Unreviewed
CVE-2026-30795 was published Mar 5, 2026
Improper Certificate Validation vulnerability in rustdesk-client RustDesk Client rustdesk-client... Critical Unreviewed
CVE-2026-30794 was published Mar 5, 2026
Cleartext Transmission of Sensitive Information vulnerability in rustdesk-server-pro RustDesk... High Unreviewed
CVE-2026-30796 was published Mar 5, 2026
A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS,... High Unreviewed
CVE-2026-30783 was published Mar 5, 2026
Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows... Critical Unreviewed
CVE-2026-30797 was published Mar 5, 2026
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of... High Unreviewed
CVE-2026-30785 was published Mar 5, 2026
Authentication Bypass by Capture-replay, Use of Password Hash With Insufficient Computational... Critical Unreviewed
CVE-2026-30789 was published Mar 5, 2026
A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS,... Critical Unreviewed
CVE-2026-30792 was published Mar 5, 2026
Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk... Critical Unreviewed
CVE-2026-30793 was published Mar 5, 2026
Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions... High Unreviewed
CVE-2026-30798 was published Mar 5, 2026
Improper Restriction of Excessive Authentication Attempts, Use of Password Hash With Insufficient... Critical Unreviewed
CVE-2026-30790 was published Mar 5, 2026
Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk... High Unreviewed
CVE-2026-3598 was published Mar 5, 2026
Avira Internet Security contains an improper link resolution vulnerability in the Software... High Unreviewed
CVE-2026-27748 was published Mar 5, 2026
Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client... High Unreviewed
CVE-2026-30791 was published Mar 5, 2026
Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the... High Unreviewed
CVE-2026-27750 was published Mar 5, 2026
The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to... Critical Unreviewed
CVE-2026-2599 was published Mar 5, 2026
Avira Internet Security contains a deserialization of untrusted data vulnerability in the System... High Unreviewed
CVE-2026-27749 was published Mar 5, 2026
The WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation plugin... High Unreviewed
CVE-2026-1720 was published Mar 5, 2026
Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause... Unknown Unreviewed
CVE-2025-69534 was published Mar 5, 2026
A improperly secured file management feature allows uploads of dangerous data types for... Critical Unreviewed
CVE-2026-21628 was published Mar 5, 2026
In affected versions of Octopus Server it was possible to create a new API key from an existing... Low Unreviewed
CVE-2026-3236 was published Mar 5, 2026
Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful... Moderate Unreviewed
CVE-2026-28547 was published Mar 5, 2026
The Page and Post Clone plugin for WordPress is vulnerable to SQL Injection via the 'meta_key'... Moderate Unreviewed
CVE-2026-2893 was published Mar 5, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database