Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
55
Go
4,522
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,514
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

4,539 advisories

Loading
The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Code... High Unreviewed
CVE-2026-17581 was published Aug 16, 2026
The The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile &... Moderate Unreviewed
CVE-2026-18385 was published Aug 16, 2026
MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code... Critical Unreviewed
CVE-2026-73678 was published Aug 14, 2026
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module... High Unreviewed
CVE-2026-73679 was published Aug 14, 2026
Improper control of generation of code ('Code Injection') in the settings feature in Devolutions... High Unreviewed
CVE-2026-19768 was published Aug 14, 2026
Grav CMS before 2.0.13 contains a remote code execution vulnerability in the Flex Objects plugin... High Unreviewed
CVE-2026-72819 was published Aug 14, 2026
Improper Control of Generation of Code ('Code Injection') (CWE-94) in Fleet Server can lead to... Moderate Unreviewed
CVE-2026-72676 was published Aug 13, 2026
amazing-print/amazing_print at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby... High Unreviewed
CVE-2026-67986 was published Aug 13, 2026
Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions. Critical Unreviewed
CVE-2026-61962 was published Aug 13, 2026
Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions. Critical Unreviewed
CVE-2026-27544 was published Aug 13, 2026
Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution... Critical Unreviewed
CVE-2026-8984 was published Jul 22, 2026
Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that... Critical Unreviewed
CVE-2026-73485 was published Aug 13, 2026
Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's... Critical Unreviewed
CVE-2026-73486 was published Aug 13, 2026
Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable... Critical Unreviewed
CVE-2026-73487 was published Aug 13, 2026
An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP)... Moderate Unreviewed
CVE-2026-0298 was published Aug 13, 2026
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution... High Unreviewed
CVE-2026-13094 was published Aug 12, 2026
A flaw was found in the cluster-curator-controller component of multicluster engine (MCE). A... Critical Unreviewed
CVE-2026-73268 was published Aug 12, 2026
The wpmudev-updates WordPress plugin before 5.0.1 does not verify the integrity of the packages... Critical Unreviewed
CVE-2026-16051 was published Aug 12, 2026
A flaw was found in the Feast operator. A malicious tenant could inject arbitrary code into their... Moderate Unreviewed
CVE-2026-18942 was published Aug 10, 2026
Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in... Critical Unreviewed
CVE-2026-44416 was published Aug 10, 2026
Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0 Users... Critical Unreviewed
CVE-2026-55799 was published Aug 10, 2026
Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 - An... Critical Unreviewed
CVE-2026-67282 was published Aug 12, 2026
An authenticated command injection vulnerability was identified in GMS Command-Line Interface ... Moderate Unreviewed
CVE-2026-66148 was published Aug 11, 2026
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email... High Unreviewed
CVE-2026-66149 was published Aug 11, 2026
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email... High Unreviewed
CVE-2026-66150 was published Aug 11, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database