Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,553
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,518
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

651 advisories

Loading
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary... High Unreviewed
CVE-2026-16869 was published Aug 19, 2026
openssl_encrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the... Critical Unreviewed
CVE-2026-74872 was published Aug 17, 2026
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary... High Unreviewed
CVE-2026-16674 was published Aug 13, 2026
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution... High Unreviewed
CVE-2026-14875 was published Aug 13, 2026
Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE... Low Unreviewed
CVE-2026-14673 was published Aug 13, 2026
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a... Moderate Unreviewed
CVE-2026-0299 was published Aug 13, 2026
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate... High Unreviewed
CVE-2026-56174 was published Aug 11, 2026
Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version... Moderate Unreviewed
CVE-2026-32791 was published Aug 11, 2026
Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within... Moderate Unreviewed
CVE-2026-20799 was published Aug 11, 2026
FirmaCheck for Windows before 1.3.16 contains a dll hijacking vulnerability that allows local... High Unreviewed
CVE-2026-41447 was published Aug 3, 2026
A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown... Moderate Unreviewed
CVE-2026-18605 was published Aug 3, 2026
Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code... High Unreviewed
CVE-2026-48391 was published Jul 28, 2026
Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code... High Unreviewed
CVE-2026-48395 was published Jul 28, 2026
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance High
CVE-2026-11400 was published for software.amazon.jdbc:aws-advanced-jdbc-wrapper (Maven) Jul 17, 2026
ph0smet Credited to ph0smet
Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote... High Unreviewed
CVE-2026-63093 was published Jul 17, 2026
CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result... High Unreviewed
CVE-2026-48287 was published Jul 15, 2026
Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary... High Unreviewed
CVE-2026-48275 was published Jul 15, 2026
Animate is affected by an Untrusted Search Path vulnerability that could result in arbitrary code... High Unreviewed
CVE-2026-48346 was published Jul 14, 2026
Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security... Moderate Unreviewed
CVE-2026-57097 was published Jul 14, 2026
A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 ... High Unreviewed
CVE-2025-40945 was published Jul 14, 2026
A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue... Moderate Unreviewed
CVE-2026-15515 was published Jul 13, 2026
Untrusted Search Path vulnerability in B&R Industrial Automation GmbH APROL. This issue affects... High Unreviewed
CVE-2026-6901 was published Jul 6, 2026
OpenClaw: Workspace .env could override Homebrew executable selection for skill install flows High
CVE-2026-53819 was published for openclaw (npm) Jul 2, 2026
feynman-hou Credited to feynman-hou
OpenClaw: Workspace-derived service PATH could influence trash command selection High
CVE-2026-53865 was published for openclaw (npm) Jun 18, 2026
OpenClaw: Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots High
CVE-2026-53858 was published for openclaw (npm) Jun 18, 2026
feynman-hou Credited to feynman-hou
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database