Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,629
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,149
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

601 advisories

Loading
ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are... High Unreviewed
CVE-2026-22049 was published Jul 22, 2026
The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full... Critical Unreviewed
CVE-2026-61425 was published Jul 20, 2026
Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based)... Moderate Unreviewed
CVE-2026-57980 was published Jul 18, 2026
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an... Moderate Unreviewed
CVE-2026-47481 was published Jul 14, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Abandoned... Moderate Unreviewed
CVE-2026-57698 was published Jul 13, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid ... High Unreviewed
CVE-2026-57697 was published Jul 13, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security... Critical Unreviewed
CVE-2026-57807 was published Jul 10, 2026
A protection mechanism failure in the Code 27 Companion Hub allows an attacker with physical... Moderate Unreviewed
CVE-2026-36028 was published Jul 8, 2026
MicroRealEstate allows adversaries to bypass authentication due to a lack of token state... High Unreviewed
CVE-2026-57867 was published Jul 7, 2026
An authentication bypass vulnerability exists in the default SFTP server component utilized... Critical Unreviewed
CVE-2026-5268 was published Jul 6, 2026
In multi-tenanted deployments, the application consent management mechanism fails to correctly... Low Unreviewed
CVE-2025-13475 was published Jul 4, 2026
Steeltoe vulnerable to management-port isolation bypass via spoofed Host header High
CVE-2026-50194 was published for Steeltoe.Management.Endpoint (NuGet) Jul 2, 2026
Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki ... Moderate Unreviewed
CVE-2026-58517 was published Jul 1, 2026
AS228T with Authentication Bypass Vulnerability High Unreviewed
CVE-2026-12579 was published Jul 1, 2026
In Modem, there is a possible system crash due to improper input validation. This could lead to... Moderate Unreviewed
CVE-2026-20459 was published Jul 1, 2026
In Modem, there is a possible information disclosure due to improper input validation. This could... Moderate Unreviewed
CVE-2026-20460 was published Jul 1, 2026
Ocelot through 24.1.0, fixed in commit f156fd4, contains a security control bypass vulnerability... Critical Unreviewed
CVE-2026-58172 was published Jun 30, 2026
Unauthenticated Broken Authentication in CorvusPay WooCommerce Payment Gateway <= 2.7.4 versions. High Unreviewed
CVE-2026-56029 was published Jun 26, 2026
Capgo before 12.128.2 contains a security control bypass vulnerability where the PostgREST/RLS... High Unreviewed
CVE-2026-56243 was published Jun 23, 2026
WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows... High Unreviewed
CVE-2020-37255 was published Jun 20, 2026
WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contains an authentication bypass... Critical Unreviewed
CVE-2019-25763 was published Jun 20, 2026
npm PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation High
CVE-2026-57134 was published for praisonai (npm) Jun 18, 2026
rexpository Credited to rexpository
Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder MStore API... Moderate Unreviewed
CVE-2026-54817 was published Jun 17, 2026
Subscriber Broken Authentication in Melhor Envio <= 2.16.3 versions. High Unreviewed
CVE-2026-54804 was published Jun 17, 2026
Unauthenticated Broken Authentication in WooCommerce Dropshipping <= 5.2.4 versions. Moderate Unreviewed
CVE-2026-49071 was published Jun 17, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database