Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

259 advisories

Loading
In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege... High Unreviewed
CVE-2026-86482 was published Sep 7, 2026
Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions. High Unreviewed
CVE-2026-84756 was published Sep 3, 2026
Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege... High Unreviewed
CVE-2026-81769 was published Sep 2, 2026
Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack <= 6.2.12 versions. High Unreviewed
CVE-2026-81297 was published Aug 31, 2026
A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some... High Unreviewed
CVE-2026-82807 was published Aug 31, 2026
Editor Privilege Escalation in FluentCRM Pro <= 3.1.12 versions. High Unreviewed
CVE-2026-78271 was published Aug 27, 2026
Subscriber Privilege Escalation in Booking Hub <= 1.3.0 versions. High Unreviewed
CVE-2026-32561 was published Aug 25, 2026
HCL Hive is affected by a broken access control vulnerability which could allow an attacker or... High Unreviewed
CVE-2026-21756 was published Aug 24, 2026
Berkeley Out-of-Order Machine (BOOM) commit 5223e44cfeb26f41380057a2eb4d651197475f69 contains a... High Unreviewed
CVE-2026-67846 was published Aug 18, 2026
Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions. High Unreviewed
CVE-2026-73350 was published Aug 18, 2026
Subscriber Privilege Escalation in The Grid <= 2.7.9.1 versions. High Unreviewed
CVE-2026-28191 was published Aug 18, 2026
A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI.... High Unreviewed
CVE-2026-15218 was published Aug 17, 2026
OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants... High Unreviewed
CVE-2026-72840 was published Aug 14, 2026
Subscriber Privilege Escalation in Directories Pro <= 2.0.5 versions. High Unreviewed
CVE-2026-66661 was published Aug 13, 2026
Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions. High Unreviewed
CVE-2026-61979 was published Aug 13, 2026
Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions. High Unreviewed
CVE-2026-28161 was published Aug 13, 2026
Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions. High Unreviewed
CVE-2026-27543 was published Aug 13, 2026
A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user... High Unreviewed
CVE-2026-15467 was published Aug 10, 2026
A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges... High Unreviewed
CVE-2026-18621 was published Aug 10, 2026
A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The... High Unreviewed
CVE-2026-19381 was published Aug 10, 2026
A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an... High Unreviewed
CVE-2026-19195 was published Aug 7, 2026
A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in... High Unreviewed
CVE-2026-19193 was published Aug 7, 2026
A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vulnerability... High Unreviewed
CVE-2026-19191 was published Aug 7, 2026
A vulnerability was detected in DeepCool DisplayService 1.2.12. This issue affects some unknown... High Unreviewed
CVE-2026-19192 was published Aug 7, 2026
A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of... High Unreviewed
CVE-2026-19190 was published Aug 7, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database