Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,683
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,532
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

4,684 advisories

Loading
ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege... High Unreviewed
CVE-2026-83961 was published Sep 3, 2026
SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required... High Unreviewed
CVE-2026-84831 was published Sep 3, 2026
OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion (webhook signature bypass) Moderate
CVE-2026-73840 was published for github.com/openchoreo/openchoreo (Go) Sep 2, 2026
ihopenre-eng Credited to ihopenre-eng
Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge High
CVE-2026-62669 was published for getgrav/grav (Composer) Sep 2, 2026
nicl4ssic Credited to nicl4ssic
A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part... Moderate Unreviewed
CVE-2026-84840 was published Sep 2, 2026
A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is... Moderate Unreviewed
CVE-2026-84839 was published Sep 2, 2026
A vulnerability exists in the affected products that allows a threat actor to gain access to user... High Unreviewed
CVE-2024-7956 was published Sep 2, 2026
The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion... High Unreviewed
CVE-2026-82183 was published Sep 2, 2026
The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not verify that the... High Unreviewed
CVE-2026-12526 was published Sep 2, 2026
A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the... Moderate Unreviewed
CVE-2026-84423 was published Sep 2, 2026
Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could... High Unreviewed
CVE-2026-73777 was published Sep 1, 2026
An authentication vulnerability exists in the AOS-CX management interface and API that may allow... High Unreviewed
CVE-2026-73771 was published Sep 1, 2026
Vulnerabilities have been identified in the operating system of AOS-CX switches that could... High Unreviewed
CVE-2026-73764 was published Sep 1, 2026
Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could... Critical Unreviewed
CVE-2026-76657 was published Sep 1, 2026
A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that... Critical Unreviewed
CVE-2026-76658 was published Sep 1, 2026
A vulnerability has been identified in the underlying operating system of HPE Networking Fabric... Moderate Unreviewed
CVE-2026-73726 was published Sep 1, 2026
Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated... Moderate Unreviewed
CVE-2026-73733 was published Sep 1, 2026
An authentication bypass vulnerability exists in the underlying operating system of HPE... Critical Unreviewed
CVE-2026-19766 was published Sep 1, 2026
Filament: Multi-factor authentication (app) can be bypassed when recovery codes are enabled High
CVE-2026-77567 was published for filament/filament (Composer) Sep 1, 2026
Orrison Credited to Orrison and danharrin danharrin danharrin
A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function... Low Unreviewed
CVE-2026-84114 was published Sep 1, 2026
The Simple Membership plugin for WordPress is vulnerable to Authentication Bypass leading to... Moderate Unreviewed
CVE-2026-77194 was published Sep 1, 2026
The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System... High Unreviewed
CVE-2026-19806 was published Sep 1, 2026
A vulnerability was identified in cu silicon up to 0.1.5. Affected by this vulnerability is the... Moderate Unreviewed
CVE-2026-82919 was published Aug 31, 2026
A flaw has been found in sdcb chats up to 1.12.0. This impacts the function DownloadPublic of the... Low Unreviewed
CVE-2026-82906 was published Aug 31, 2026
A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of... Critical Unreviewed
CVE-2026-82695 was published Aug 31, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database