Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

585 advisories

Loading
Electric Postgres Sync versions below 1.6.10 contains an information disclosure vulnerability... Moderate Unreviewed
CVE-2026-65314 was published Jul 22, 2026
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application... Low Unreviewed
CVE-2026-47011 was published Jul 22, 2026
djangoSIGE through 1.10 (commit a6fe7e8) contains a user enumeration vulnerability in... Moderate Unreviewed
CVE-2026-64822 was published Jul 21, 2026
Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the... High Unreviewed
CVE-2026-56339 was published Jul 15, 2026
Cap-go before 12.128.2 contains an information disclosure vulnerability in the public... Moderate Unreviewed
CVE-2026-56296 was published Jul 11, 2026
An issue in docuForm GmbH FSM Client v.11.11c allows a remote attacker to obtain sensitive... High Unreviewed
CVE-2026-51926 was published Jul 9, 2026
Capgo before 12.128.2 contains an information disclosure vulnerability in the public... Moderate Unreviewed
CVE-2026-56327 was published Jul 1, 2026
Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a... Moderate Unreviewed
CVE-2026-14112 was published Jul 1, 2026
Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote... Moderate Unreviewed
CVE-2026-14085 was published Jul 1, 2026
Side-channel information leakage in WebAudio in Google Chrome prior to 150.0.7871.47 allowed a... Moderate Unreviewed
CVE-2026-14071 was published Jul 1, 2026
Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871... Moderate Unreviewed
CVE-2026-14074 was published Jul 1, 2026
Side-channel information leakage in Paint in Google Chrome prior to 150.0.7871.47 allowed a... Moderate Unreviewed
CVE-2026-13922 was published Jul 1, 2026
Cap-go before 12.128.2 contains an information disclosure vulnerability in the OPTIONS /build... Moderate Unreviewed
CVE-2026-56316 was published Jun 21, 2026
Capgo before 12.128.2 contains an information disclosure vulnerability in the GET /statistics/app... Moderate Unreviewed
CVE-2026-56319 was published Jun 20, 2026
Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows... High Unreviewed
CVE-2023-54357 was published Jun 19, 2026
Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed a... Moderate Unreviewed
CVE-2026-11289 was published Jun 5, 2026
Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53... Moderate Unreviewed
CVE-2026-11284 was published Jun 5, 2026
A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. The impacted... Low Unreviewed
CVE-2026-8242 was published May 10, 2026
In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate... Moderate Unreviewed
CVE-2023-5872 was published Apr 16, 2026
User enumeration vulnerability in /pwreset.php in osTicket v1.18.2 allows remote attackers to... Moderate Unreviewed
CVE-2026-26895 was published Apr 2, 2026
The login mechanism of Sage DPW 2021_06_004 displays distinct responses for valid and invalid... Low Unreviewed
CVE-2025-67806 was published Apr 1, 2026
In wolfSSL 5.8.4, constant-time masking logic in sp_256_get_entry_256_9 is optimized into... Low Unreviewed
CVE-2026-3580 was published Mar 19, 2026
wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64... Low Unreviewed
CVE-2026-3579 was published Mar 19, 2026
A flaw has been found in projectsend up to r1945. This impacts an unknown function of the file... Moderate Unreviewed
CVE-2026-4045 was published Mar 12, 2026
GFI MailEssentials AI versions prior to 22.4 contain an arbitrary directory existence enumeration... Moderate Unreviewed
CVE-2026-23621 was published Feb 19, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database