Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,683
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,532
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

603 advisories

Loading
SiYuan: Anonymous publish-password authentication bypass via getHeadingChildrenDOM / getHeading*Transaction / getBacklinkDoc (publish mode) High
GHSA-7j72-f6wg-cxw6 was published for github.com/siyuan-note/siyuan/kernel (Go) Sep 3, 2026
Shirshakhtml Credited to Shirshakhtml
Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions. High Unreviewed
CVE-2026-84777 was published Sep 3, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA... Low Unreviewed
CVE-2026-81168 was published Sep 2, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login... Unknown Unreviewed
CVE-2026-16647 was published Sep 2, 2026
Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.9.8 versions. High Unreviewed
CVE-2026-82225 was published Aug 31, 2026
Gophish through 0.12.1 fails to enforce account lockout and password change requirements in the... High Unreviewed
CVE-2026-82269 was published Aug 28, 2026
Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may... Critical Unreviewed
CVE-2026-76943 was published Aug 28, 2026
A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from... Critical Unreviewed
CVE-2026-65641 was published Aug 27, 2026
GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 19.1.7, 19.2... Moderate Unreviewed
CVE-2026-3035 was published Aug 26, 2026
In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the... Moderate Unreviewed
CVE-2026-58092 was published Aug 26, 2026
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal... Critical Unreviewed
CVE-2026-16639 was published Aug 26, 2026
The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via... High Unreviewed
CVE-2026-63587 was published Aug 25, 2026
Unauthenticated Broken Authentication in WPLegalPages <= 3.7.0 versions. High Unreviewed
CVE-2026-78259 was published Aug 25, 2026
Unauthenticated Broken Authentication in User Registration & Membership Pro <= 5.4.5 versions. Critical Unreviewed
CVE-2026-74001 was published Aug 20, 2026
Subscriber Broken Authentication in Leyka <= 3.32.3 versions. High Unreviewed
CVE-2026-66677 was published Aug 20, 2026
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through... Critical Unreviewed
CVE-2026-19490 was published Aug 19, 2026
An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which... Moderate Unreviewed
CVE-2021-43718 was published Aug 18, 2026
NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server... High Unreviewed
CVE-2026-24185 was published Aug 18, 2026
Missing authentication in initial setup functionality left exposed until first reboot in GBIF... Critical Unreviewed
CVE-2026-71879 was published Aug 18, 2026
Unauthenticated Broken Authentication in Popup by Supsystic <= 1.13.0 versions. Critical Unreviewed
CVE-2026-73381 was published Aug 18, 2026
Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions. Moderate Unreviewed
CVE-2026-73398 was published Aug 18, 2026
Subscriber Broken Authentication in MWB HubSpot for WooCommerce <= 1.6.7 versions. High Unreviewed
CVE-2026-73396 was published Aug 18, 2026
Unauthenticated Broken Authentication in Flutterwave WooCommerce <= 3.3.0 versions. Moderate Unreviewed
CVE-2026-73399 was published Aug 18, 2026
Unauthenticated Bypass Vulnerability in Contact Form by Supsystic < 1.10.0 versions. Moderate Unreviewed
CVE-2026-73379 was published Aug 18, 2026
Unauthenticated Broken Authentication in Ezoic <= 2.22.11 versions. High Unreviewed
CVE-2026-32481 was published Aug 18, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database