Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
45
GitHub Actions
47
Go
3,309
Maven
5,000+
npm
5,000+
NuGet
876
pip
4,531
Pub
12
RubyGems
1,009
Rust
1,195
Swift
51
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

141,221 advisories

Loading
The DSGVO snippet for Leaflet Map and its Extensions plugin for WordPress is vulnerable to Stored... Moderate Unreviewed
CVE-2026-4389 was published Mar 26, 2026
The Elementor Website Builder plugin for WordPress is vulnerable to Incorrect Authorization to... Moderate Unreviewed
CVE-2026-1206 was published Mar 26, 2026
A vulnerability was detected in code-projects Online Food Ordering System 1.0. This issue affects... Moderate Unreviewed
CVE-2026-4844 was published Mar 26, 2026
The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via... Moderate Unreviewed
CVE-2026-4278 was published Mar 26, 2026
A flaw has been found in dameng100 muucmf 1.9.5.20260309. Impacted is an unknown function of the... Moderate Unreviewed
CVE-2026-4845 was published Mar 26, 2026
The ShortPixel Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting... Moderate Unreviewed
CVE-2026-4335 was published Mar 26, 2026
The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2026-4331 was published Mar 26, 2026
A flaw has been found in SourceCodester Malawi Online Market 1.0. The impacted element is an... Moderate Unreviewed
CVE-2026-4838 was published Mar 26, 2026
A vulnerability has been found in SourceCodester Food Ordering System 1.0. This affects an... Moderate Unreviewed
CVE-2026-4839 was published Mar 26, 2026
A weakness has been identified in code-projects Online Food Ordering System 1.0. This affects an... Moderate Unreviewed
CVE-2026-4841 was published Mar 26, 2026
A vulnerability has been found in dameng100 muucmf 1.9.5.20260309. The affected element is an... Moderate Unreviewed
CVE-2026-4846 was published Mar 26, 2026
A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. This... Moderate Unreviewed
CVE-2026-4842 was published Mar 26, 2026
The FormLift for Infusionsoft Web Forms plugin for WordPress is vulnerable to Missing... Moderate Unreviewed
CVE-2026-4281 was published Mar 26, 2026
The BWL Advanced FAQ Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2026-4075 was published Mar 26, 2026
The FloristPress for Woo – Customize your eCommerce store for your Florist plugin for WordPress... Moderate Unreviewed
CVE-2026-1986 was published Mar 26, 2026
A vulnerability was identified in kalcaddle kodbox 1.64. This issue affects the function Add of... Moderate Unreviewed
CVE-2026-4830 was published Mar 26, 2026
A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function... Moderate Unreviewed
CVE-2026-4833 was published Mar 26, 2026
A security flaw has been discovered in kalcaddle kodbox 1.64. Impacted is the function can of the... Moderate Unreviewed
CVE-2026-4831 was published Mar 26, 2026
A security vulnerability has been detected in code-projects Accounting System 1.0. Impacted is an... Moderate Unreviewed
CVE-2026-4835 was published Mar 26, 2026
A vulnerability was detected in code-projects Accounting System 1.0. The affected element is an... Moderate Unreviewed
CVE-2026-4836 was published Mar 26, 2026
A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This... Moderate Unreviewed
CVE-2026-4826 was published Mar 26, 2026
A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an... Moderate Unreviewed
CVE-2026-4825 was published Mar 26, 2026
IBM Knowledge Catalog Standard Cartridge 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.1, 5.1.1, 5,1.2, 5.1.3, 5... Moderate Unreviewed
CVE-2025-36187 was published Mar 26, 2026
IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an... Moderate Unreviewed
CVE-2025-14684 was published Mar 26, 2026
IBM Concert 1.0.0 through 2.2.0 could allow a local user to obtain sensitive information due to... Moderate Unreviewed
CVE-2025-36440 was published Mar 25, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database