Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

12 advisories

Loading
SQL injection vulnerability in AES Multimedia's Gestnet v1.07. This vulnerability allows an... Critical Unreviewed
CVE-2025-40671 was published May 26, 2025
DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd... Critical Unreviewed
CVE-2026-9270 was published Jun 5, 2026
DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. ... Critical Unreviewed
CVE-2026-11362 was published Jun 5, 2026
Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric... Critical Unreviewed
CVE-2026-50638 was published Jun 10, 2026
Net::Statsite::Client versions through 1.1.0 for Perl allow metric injections. Net::Statsite:... Critical Unreviewed
CVE-2026-11373 was published Jun 22, 2026
An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an... Critical Unreviewed
CVE-2026-72590 was published Aug 10, 2026
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF... Critical Unreviewed
CVE-2026-77550 was published Aug 27, 2026
A malicious actor with access to the network and under certain conditions could exploit an... Critical Unreviewed
CVE-2026-77549 was published Aug 27, 2026
Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent... Critical Unreviewed
CVE-2026-47890 was published Aug 27, 2026
Spring MVC applications using the functional web framework are vulnerable to stream corruption... Critical Unreviewed
CVE-2026-59313 was published Aug 27, 2026
Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope... Critical Unreviewed
CVE-2026-82854 was published Aug 31, 2026
Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an... Critical Unreviewed
CVE-2026-75925 was published Sep 5, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database