Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,553
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,518
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

46 advisories

Loading
A flaw was found in search-v2-operator. The operator's ClusterRole has permissions equivalent to... Critical Unreviewed
CVE-2026-70496 was published Aug 19, 2026
A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster... Critical Unreviewed
CVE-2026-72508 was published Aug 12, 2026
When applying replicated changes for a row that is missing one or more columns, pglogical... Critical Unreviewed
CVE-2026-50737 was published Jul 28, 2026
[This CNA information record relates to multiple CVEs; the text explains which aspects... Critical Unreviewed
CVE-2026-23562 was published Jul 9, 2026
[This CNA information record relates to multiple CVEs; the text explains which aspects... Critical Unreviewed
CVE-2026-23559 was published Jul 9, 2026
[This CNA information record relates to multiple CVEs; the text explains which aspects... Critical Unreviewed
CVE-2026-23560 was published Jul 9, 2026
[This CNA information record relates to multiple CVEs; the text explains which aspects... Critical Unreviewed
CVE-2026-23561 was published Jul 9, 2026
[This CNA information record relates to multiple CVEs; the text explains which aspects... Critical Unreviewed
CVE-2026-42486 was published Jul 9, 2026
Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate... Critical Unreviewed
CVE-2026-48584 was published Jun 19, 2026
Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed a... Critical Unreviewed
CVE-2026-12027 was published Jun 12, 2026
Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53... Critical Unreviewed
CVE-2026-11167 was published Jun 5, 2026
Execution with Unnecessary Privileges vulnerability in Saphira Saphira Connect allows Remote Code... Critical Unreviewed
CVE-2023-4662 was published Sep 15, 2023
Execution with unnecessary privileges in Microsoft Dynamics 365 (on-premises) allows an... Critical Unreviewed
CVE-2026-42833 was published May 12, 2026
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container... Critical Unreviewed
CVE-2026-1346 was published Apr 8, 2026
An issue was discovered in Percona PMM before 3.7. Because an internal database user retains... Critical Unreviewed
CVE-2026-25212 was published Apr 2, 2026
An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.... Critical Unreviewed
CVE-2026-34877 was published Apr 2, 2026
GV Edge Recording Manager (ERM) v2.3.1 improperly runs application components with SYSTEM-level... Critical Unreviewed
CVE-2026-4606 was published Mar 23, 2026
IBM Common Cryptographic Architecture (CCA) 7.5.52 and 8.4.82 could allow an unauthenticated user... Critical Unreviewed
CVE-2025-13375 was published Feb 4, 2026
A vulnerability has been identified in the ServiceNow AI Platform that could enable an... Critical Unreviewed
CVE-2025-12420 was published Jan 13, 2026
NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with... Critical Unreviewed
CVE-2025-33224 was published Dec 23, 2025
NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with... Critical Unreviewed
CVE-2025-33223 was published Dec 23, 2025
Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an execution with unnecessary... Critical Unreviewed
CVE-2025-34515 was published Oct 16, 2025
Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges... Critical Unreviewed
CVE-2025-34274 was published Oct 31, 2025
An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network... Critical Unreviewed
CVE-2025-6949 was published Oct 17, 2025
An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network... Critical Unreviewed
CVE-2025-6893 was published Oct 17, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database