Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,183
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

11,936 advisories

Loading
Apprise forwards configured auth headers across cross-origin HTTP redirects Low
CVE-2026-59180 was published for apprise (pip) Oct 14, 2026
gistrec Credited to gistrec
A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their... Moderate Unreviewed
CVE-2026-110777 was published Oct 14, 2026
A vulnerability relating to the exposure of confidential information in the customer invoicing... Critical Unreviewed
CVE-2026-14851 was published Oct 14, 2026
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for... Moderate Unreviewed
CVE-2026-103380 was published Oct 14, 2026
The AWP Classifieds WordPress plugin before 4.4.9 does not verify that a request is authorised to... Moderate Unreviewed
CVE-2026-96904 was published Oct 14, 2026
The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export... Moderate Unreviewed
CVE-2026-106099 was published Oct 14, 2026
The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict... Moderate Unreviewed
CVE-2026-105969 was published Oct 14, 2026
The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private... Moderate Unreviewed
CVE-2026-107320 was published Oct 14, 2026
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure... Moderate Unreviewed
CVE-2026-97471 was published Oct 14, 2026
Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker... Moderate Unreviewed
CVE-2026-110146 was published Oct 14, 2026
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an... High Unreviewed
CVE-2026-85891 was published Oct 13, 2026
Lenve vhr through commit 03abbd3 contains an information disclosure vulnerability that allows any... High Unreviewed
CVE-2026-110217 was published Oct 13, 2026
A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown... Low Unreviewed
CVE-2026-109526 was published Oct 13, 2026
EspoCRM 4.0.0 before 10.0.7 contains an access control vulnerability that allows authenticated... Moderate Unreviewed
CVE-2026-109959 was published Oct 13, 2026
EspoCRM 4.0.0 before 10.0.7 contains an improper access control vulnerability that allows... Moderate Unreviewed
CVE-2026-109958 was published Oct 13, 2026
FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in... Moderate Unreviewed
CVE-2026-109948 was published Oct 13, 2026
Information disclosure in the Networking: Cache component. This vulnerability was fixed in... Moderate Unreviewed
CVE-2026-109769 was published Oct 13, 2026
Information disclosure in the WebRTC: Networking component. This vulnerability was fixed in... Moderate Unreviewed
CVE-2026-109771 was published Oct 13, 2026
Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in... Moderate Unreviewed
CVE-2026-109777 was published Oct 13, 2026
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158... Moderate Unreviewed
CVE-2026-109767 was published Oct 13, 2026
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158... Moderate Unreviewed
CVE-2026-109751 was published Oct 13, 2026
Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158... Moderate Unreviewed
CVE-2026-109742 was published Oct 13, 2026
Information disclosure, privilege escalation in the Security: Process Sandboxing component. This... High Unreviewed
CVE-2026-109709 was published Oct 13, 2026
The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive... Moderate Unreviewed
CVE-2026-89097 was published Oct 13, 2026
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain... Critical Unreviewed
CVE-2026-82103 was published Oct 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database