Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,535
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,515
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

59 advisories

Loading
The Elastic Cloud on Kubernetes (ECK) operator reads a list of secret references from an... Moderate Unreviewed
CVE-2026-72640 was published Aug 13, 2026
A flaw was found in the clusterclaims-controller component of Multicluster Engine (MCE). An... High Unreviewed
CVE-2026-73266 was published Aug 13, 2026
A flaw was found in the multicloud-integrations component. The Application propagation controller... Critical Unreviewed
CVE-2026-72526 was published Aug 12, 2026
A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management ... Critical Unreviewed
CVE-2026-70398 was published Aug 12, 2026
A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create... Moderate Unreviewed
CVE-2026-16456 was published Aug 10, 2026
The OnCallNotificationActivity in the Datadog Android application is declared android:exported=... Moderate Unreviewed
CVE-2026-44964 was published Aug 7, 2026
A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster... High Unreviewed
CVE-2026-17107 was published Jul 24, 2026
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary... Critical Unreviewed
CVE-2026-42933 was published Jul 24, 2026
An authenticated user with write privileges on a Queryable Encryption-enabled collection may be... High Unreviewed
CVE-2026-13062 was published Jul 22, 2026
An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior... Moderate Unreviewed
CVE-2026-12879 was published Jul 9, 2026
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to... High Unreviewed
CVE-2026-36608 was published Jun 3, 2026
In getCallingPackageName of Shared.java, there is a possible way to bypass activity start... High Unreviewed
CVE-2026-0098 was published Jun 2, 2026
In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity... High Unreviewed
CVE-2025-48570 was published Jun 2, 2026
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 before 18.9.7, 18... Moderate Unreviewed
CVE-2026-3160 was published May 14, 2026
GrapheneOS before 2026050400 allows attackers to discover the real IP address of a VPN user as a... Low Unreviewed
CVE-2026-45182 was published May 10, 2026
Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose a deprecated .NET... High Unreviewed
CVE-2026-39906 was published Apr 15, 2026
In gmc_ddr_handle_mba_mr_req of gmc_mba_ddr.c, there is a possible escalation of privileges due... High Unreviewed
CVE-2026-0107 was published Mar 10, 2026
In multiple locations, there is a possible privilege escalation due to a confused deputy. This... High Unreviewed
CVE-2026-0008 was published Mar 2, 2026
In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused... High Unreviewed
CVE-2025-48646 was published Mar 2, 2026
In setupLayout of PickActivity.java, there is a possible way to start any activity as a... High Unreviewed
CVE-2026-0013 was published Mar 2, 2026
In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user... High Unreviewed
CVE-2026-0021 was published Mar 2, 2026
In multiple functions of MediaProvider.java, there is a possible external storage write... High Unreviewed
CVE-2025-48579 was published Mar 2, 2026
An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a... High Unreviewed
CVE-2023-31313 was published Feb 12, 2026
A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This... Critical Unreviewed
CVE-2025-64125 was published Jan 3, 2026
A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This... Critical Unreviewed
CVE-2025-64123 was published Jan 3, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database