Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,556
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,518
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

29,340 advisories

Loading
A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the... Critical Unreviewed
CVE-2026-78167 was published Aug 24, 2026
exceljs-hardened before 5.0.0 contains a prototype pollution vulnerability in the deepMerge... Critical Unreviewed
CVE-2026-78207 was published Aug 24, 2026
justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant... Critical Unreviewed
CVE-2026-8445 was published Aug 23, 2026
justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active... Critical Unreviewed
CVE-2026-7808 was published Aug 23, 2026
justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers ... Critical Unreviewed
CVE-2026-5388 was published Aug 23, 2026
privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to... Critical Unreviewed
CVE-2026-78155 was published Aug 23, 2026
The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP... Critical Unreviewed
CVE-2026-4703 was published Aug 22, 2026
Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in... Critical Unreviewed
CVE-2026-76604 was published Aug 22, 2026
Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.3 - ???. Critical Unreviewed
CVE-2026-76606 was published Aug 22, 2026
Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.3 - ???. Critical Unreviewed
CVE-2026-76605 was published Aug 22, 2026
Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.3 - ???. Critical Unreviewed
CVE-2026-76607 was published Aug 22, 2026
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7... Critical Unreviewed
CVE-2026-77992 was published Aug 22, 2026
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition... Critical Unreviewed
CVE-2026-76571 was published Aug 22, 2026
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.3 -... Critical Unreviewed
CVE-2026-76602 was published Aug 22, 2026
NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction... Critical Unreviewed
CVE-2026-63310 was published Aug 22, 2026
A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability... Critical Unreviewed
CVE-2026-77946 was published Aug 22, 2026
The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF... Critical Unreviewed
CVE-2026-78003 was published Aug 22, 2026
A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application... Critical Unreviewed
CVE-2026-12710 was published Aug 22, 2026
The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was... Critical Unreviewed
CVE-2026-77000 was published Aug 22, 2026
The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side... Critical Unreviewed
CVE-2026-77002 was published Aug 22, 2026
The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does... Critical Unreviewed
CVE-2026-77001 was published Aug 22, 2026
Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom... Critical Unreviewed
CVE-2026-75932 was published Aug 21, 2026
llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's... Critical Unreviewed
CVE-2026-39909 was published Aug 21, 2026
Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to... Critical Unreviewed
CVE-2026-69502 was published Aug 21, 2026
Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing... Critical Unreviewed
CVE-2026-77087 was published Aug 21, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database