Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

61 advisories

Loading
Wagtail: Improper restriction handling on Page translation API endpoint Moderate
GHSA-jm5p-837g-rv8g was published for wagtail (pip) Aug 20, 2026
gasman Credited to gasman and tinyb0y tinyb0y tinyb0y
Wagtail: Improper permission handling when copying snippets Moderate
GHSA-x5cx-w6p2-mxf2 was published for wagtail (pip) Aug 20, 2026
gasman Credited to gasman and tinyb0y tinyb0y tinyb0y
Wagtail: Improper restriction handling on descendant collections in Documents and Images API Moderate
GHSA-c2xx-cjmh-9q8f was published for wagtail (pip) Aug 20, 2026
gasman Credited to gasman, RealOrangeOne, and thientd RealOrangeOne RealOrangeOne
thientd thientd
Wagtail: Improper restriction handling on Pages admin API Moderate
CVE-2026-55468 was published for wagtail (pip) Aug 20, 2026
zerolab Credited to zerolab and thibaudcolas thibaudcolas thibaudcolas
Wagtail: Pages translations can be created without page permissions when using simple_translation Moderate
CVE-2026-54262 was published for wagtail (pip) Aug 20, 2026
devansh3008 Credited to devansh3008, zerolab, gasman, and iaohkut-from-NightWolf-Team zerolab zerolab
gasman gasman iaohkut-from-NightWolf-Team iaohkut-from-NightWolf-Team
Wagtail: Improper permission handling in image preview Moderate
CVE-2026-54261 was published for wagtail (pip) Aug 20, 2026
zerolab Credited to zerolab, 0x1saac, and harshakshit 0x1saac 0x1saac
harshakshit harshakshit
Wagtail: Improper restriction handling on Documents and Images chosen endpoints Moderate
CVE-2026-54259 was published for wagtail (pip) Aug 20, 2026
harshakshit Credited to harshakshit, zerolab, and gasman zerolab zerolab
gasman gasman
Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact... Moderate Unreviewed
CVE-2026-73239 was published Aug 12, 2026
Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploads Moderate
CVE-2026-32639 was published for winter/wn-cms-module (Composer) Aug 12, 2026
Vincent550102 Credited to Vincent550102
Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara... Moderate Unreviewed
CVE-2026-11804 was published Jul 23, 2026
Gitea: Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard) Moderate
CVE-2026-58416 was published for gitea.dev (Go) Jul 21, 2026
CassianStarck Credited to CassianStarck
Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin.... Moderate Unreviewed
CVE-2026-62393 was published Jul 14, 2026
In Modem, there is a possible escalation of privilege due to a permissions bypass. This could... Moderate Unreviewed
CVE-2026-20463 was published Jul 1, 2026
LDAP filter injection vulnerability in Yandex Database prior to 25.3.1.25 allows a remote... Moderate Unreviewed
CVE-2026-10549 was published Jun 2, 2026
Keycloak Vulnerable to Improper Handling of Insufficient Permissions or Privilege Moderate
CVE-2026-9792 was published for org.keycloak:keycloak-services (Maven) May 28, 2026
A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read... Moderate Unreviewed
CVE-2026-2340 was published May 27, 2026
Wagtail has improper permission handling when copying pages Moderate
CVE-2026-44200 was published for wagtail (pip) May 8, 2026
RealOrangeOne Credited to RealOrangeOne and thesanjok thesanjok thesanjok
Wagtail has improper restriction handling on Documents and Images API Moderate
CVE-2026-44201 was published for wagtail (pip) May 8, 2026
thesanjok Credited to thesanjok and RealOrangeOne RealOrangeOne RealOrangeOne
Wagtail has improper permission handling when deleting form submissions Moderate
CVE-2026-44199 was published for wagtail (pip) May 8, 2026
RealOrangeOne Credited to RealOrangeOne and shukla304 shukla304 shukla304
Wagtail has improper permission handling when viewing page history Moderate
CVE-2026-44198 was published for wagtail (pip) May 8, 2026
RealOrangeOne Credited to RealOrangeOne and seoyoung-kang seoyoung-kang seoyoung-kang
Wagtail has improper permission handling when comparing revisions Moderate
CVE-2026-44197 was published for wagtail (pip) May 8, 2026
RealOrangeOne Credited to RealOrangeOne and seoyoung-kang seoyoung-kang seoyoung-kang
Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing... Moderate Unreviewed
CVE-2026-6805 was published May 7, 2026
In geniezone, there is a possible escalation of privilege due to a missing permission check. This... Moderate Unreviewed
CVE-2026-20448 was published May 4, 2026
Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 ... Moderate Unreviewed
CVE-2026-24096 was published Apr 1, 2026
Keycloak: Missing Role Enforcement on UMA 2.0 Permission Ticket Endpoint Leads to Information Disclosure Moderate
CVE-2026-3190 was published for org.keycloak:keycloak-model-jpa (Maven) Mar 26, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database