Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
55
Go
4,533
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,514
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,555 advisories

Loading
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters... High Unreviewed
CVE-2026-8056 was published Jul 17, 2026
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution... High Unreviewed
CVE-2026-9762 was published Jul 17, 2026
PraisonAI (praisonaiagents) before 1.6.78 contains a remote code execution vulnerability in the... High Unreviewed
CVE-2026-61446 was published Jul 15, 2026
PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating... High Unreviewed
CVE-2026-61433 was published Jul 15, 2026
The bundled Grav Flex Objects plugin (getgrav/grav-plugin-flex-objects) before 1.4.0 contains a... High Unreviewed
CVE-2026-58655 was published Jul 15, 2026
Post-authentication improper control of generation of code ('Code Injection') vulnerability has... High Unreviewed
CVE-2026-15410 was published Jul 14, 2026
The WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel plugin for... High Unreviewed
CVE-2026-13353 was published Jul 11, 2026
Grav before 2.0.2 contains a Twig sandbox bypass that allows a page author (any admin.pages user,... High Unreviewed
CVE-2026-61450 was published Jul 10, 2026
In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger,... High Unreviewed
CVE-2026-12252 was published Jul 4, 2026
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote... High Unreviewed
CVE-2026-14407 was published Jul 2, 2026
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote... High Unreviewed
CVE-2026-14383 was published Jul 2, 2026
JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a remote code... High Unreviewed
CVE-2026-58454 was published Jul 1, 2026
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper... High Unreviewed
CVE-2026-24248 was published Jul 1, 2026
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause... High Unreviewed
CVE-2026-24249 was published Jul 1, 2026
Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI... High Unreviewed
CVE-2026-13749 was published Jun 29, 2026
Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions. High Unreviewed
CVE-2026-57315 was published Jun 26, 2026
A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally... High Unreviewed
CVE-2025-7958 was published Jun 26, 2026
Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio... High Unreviewed
CVE-2026-50741 was published Jun 26, 2026
Contributor Remote Code Execution (RCE) in Post Snippets <= 4.0.19 versions. High Unreviewed
CVE-2026-56049 was published Jun 25, 2026
The AdRotate Banner Manager plugin for WordPress is vulnerable to PHP Code Injection in all... High Unreviewed
CVE-2026-12242 was published Jun 24, 2026
A missing validation of user input exists when saving delivery limitations in Revive Adserver 6.0... High Unreviewed
CVE-2026-44959 was published Jun 23, 2026
A missing validation of user input when saving delivery limitations in Revive Adserver 6.0.6 and... High Unreviewed
CVE-2026-34916 was published Jun 23, 2026
IBM i 7.6, 7.5, 7.4, and 7.3, IBM WebSphere Application Server, and IBM WebSphere Application... High Unreviewed
CVE-2026-9072 was published Jun 22, 2026
IBM i 7.6, 7.5, 7.4, and 7.3, IBM WebSphere Application Server and IBM WebSphere Application... High Unreviewed
CVE-2026-8858 was published Jun 22, 2026
MISP allowed a site administrator to configure an arbitrary filesystem path for the NDJSON error... High Unreviewed
CVE-2026-56446 was published Jun 22, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database