Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,185
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

1,267 advisories

Loading
Apprise forwards configured auth headers across cross-origin HTTP redirects Low
CVE-2026-59180 was published for apprise (pip) Oct 14, 2026
gistrec Credited to gistrec
A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown... Low Unreviewed
CVE-2026-109526 was published Oct 13, 2026
A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function... Low Unreviewed
CVE-2026-108930 was published Oct 12, 2026
A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function... Low Unreviewed
CVE-2026-108811 was published Oct 12, 2026
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.2.0... Low Unreviewed
CVE-2026-107694 was published Oct 11, 2026
The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added... Low Unreviewed
CVE-2026-104681 was published Oct 11, 2026
The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is... Low Unreviewed
CVE-2026-94258 was published Oct 8, 2026
The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a... Low Unreviewed
CVE-2026-105195 was published Oct 8, 2026
vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle Low
CVE-2026-105752 was published for vllm (pip) Oct 6, 2026
KernelClint Credited to KernelClint, dhalf, and jperezdealgaba dhalf dhalf
jperezdealgaba jperezdealgaba
A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown... Low Unreviewed
CVE-2026-105098 was published Oct 4, 2026
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code... Low Unreviewed
CVE-2026-96962 was published Oct 3, 2026
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it... Low Unreviewed
CVE-2026-86834 was published Oct 3, 2026
The WP Ultimate CSV Importer WordPress plugin before 9.2 does not use a site-specific secret... Low Unreviewed
CVE-2026-80518 was published Oct 3, 2026
The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress... Low Unreviewed
CVE-2026-102002 was published Oct 2, 2026
HCL BigFix Service Management is affected by an Information Disclosure vulnerability the... Low Unreviewed
CVE-2026-67172 was published Oct 1, 2026
Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker... Low Unreviewed
CVE-2026-95312 was published Sep 29, 2026
A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an... Low Unreviewed
CVE-2026-101265 was published Sep 29, 2026
A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the... Low Unreviewed
CVE-2026-101146 was published Sep 28, 2026
A vulnerability was found in Eleveo Quality Management 9.7.0. Affected by this issue is some... Low Unreviewed
CVE-2026-101143 was published Sep 28, 2026
The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level... Low Unreviewed
CVE-2026-96526 was published Sep 26, 2026
A security vulnerability has been detected in O2OA up to 9.5.3/10.0.2. This vulnerability affects... Low Unreviewed
CVE-2026-97179 was published Sep 24, 2026
The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order... Low Unreviewed
CVE-2026-93528 was published Sep 23, 2026
wlc may disclose API tokens to project-configured URLs Low
CVE-2026-62364 was published for wlc (pip) Sep 22, 2026
nijel Credited to nijel, type5afe, and visionxstack type5afe type5afe
visionxstack visionxstack
The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or... Low Unreviewed
CVE-2026-92423 was published Sep 20, 2026
HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which... Low Unreviewed
CVE-2026-56597 was published Sep 18, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database