Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,582
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,524
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

758 advisories

Loading
An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release... Critical Unreviewed
CVE-2026-16279 was published Aug 27, 2026
Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing.... High Unreviewed
CVE-2026-18985 was published Aug 26, 2026
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions... High Unreviewed
CVE-2026-66422 was published Aug 26, 2026
A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function... Moderate Unreviewed
CVE-2026-78887 was published Aug 25, 2026
Ech0 version 4.3.4 and earlier fails to reliably enforce scoped access token (least-privilege)... High Unreviewed
CVE-2026-79667 was published Aug 25, 2026
A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects... Low Unreviewed
CVE-2026-78160 was published Aug 24, 2026
A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0... Low Unreviewed
CVE-2026-78144 was published Aug 24, 2026
A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0.... Low Unreviewed
CVE-2026-78142 was published Aug 24, 2026
Improper authorization for CRUD operations on Project Roles and Project Role permissions for... High Unreviewed
CVE-2026-66722 was published Aug 21, 2026
Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows... Low Unreviewed
CVE-2026-18283 was published Aug 20, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve privilege... High Unreviewed
CVE-2026-16925 was published Aug 20, 2026
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold... High Unreviewed
CVE-2026-76352 was published Aug 20, 2026
stigmem versions before 0.9.0a2 allow unauthenticated access when authentication is disabled on... Critical Unreviewed
CVE-2026-76243 was published Aug 19, 2026
The PPWP: Password Protect Pages, Posts & Full or Partial Content plugin for WordPress is... Moderate Unreviewed
CVE-2025-11729 was published Aug 19, 2026
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web... Moderate Unreviewed
CVE-2026-70923 was published Aug 18, 2026
A flaw was found in the group policy provider of Keycloak authorization services, which is used... Moderate Unreviewed
CVE-2026-19608 was published Aug 18, 2026
A security flaw has been discovered in Webkul Bagisto up to 2.4.4. This issue affects some... Low Unreviewed
CVE-2026-19997 was published Aug 17, 2026
A vulnerability was found in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown... Low Unreviewed
CVE-2026-19994 was published Aug 17, 2026
A vulnerability was identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300,... Moderate Unreviewed
CVE-2026-19979 was published Aug 17, 2026
A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue... Low Unreviewed
CVE-2026-19966 was published Aug 17, 2026
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass... High Unreviewed
CVE-2026-16879 was published Aug 14, 2026
A security vulnerability has been detected in Webkul Bagisto up to 2.4.4. This vulnerability... Low Unreviewed
CVE-2026-19838 was published Aug 14, 2026
A vulnerability was determined in Webkul Bagisto up to 2.4.4. Affected is an unknown function of... Low Unreviewed
CVE-2026-19834 was published Aug 14, 2026
A security flaw has been discovered in Webkul Bagisto up to 2.4.4. Affected by this issue is some... Low Unreviewed
CVE-2026-19836 was published Aug 14, 2026
A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function... Low Unreviewed
CVE-2026-19784 was published Aug 14, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database