Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

542 advisories

Loading
A vulnerability has been found in yashbhalgat HashNeRF-pytorch up to... Low Unreviewed
CVE-2026-15531 was published Jul 13, 2026
A vulnerability was determined in AkariAsai self-rag up to... Low Unreviewed
CVE-2026-15535 was published Jul 13, 2026
A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated... Low Unreviewed
CVE-2026-0282 was published Jul 9, 2026
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to... Low Unreviewed
CVE-2026-15115 was published Jul 9, 2026
A flaw has been found in davenardella snap7 up to 1.4.3. This affects the function TS7Worker:... Low Unreviewed
CVE-2026-15105 was published Jul 9, 2026
Apache Camel-Mail: The mail producer applied attacker-supplied mail.smtp.* / mail.smtps.* message headers as JavaMail session properties Low
CVE-2026-46584 was published for org.apache.camel:camel-mail (Maven) Jul 6, 2026
oscerd Credited to oscerd
Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This... Low Unreviewed
CVE-2026-13706 was published Jul 1, 2026
Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150... Low Unreviewed
CVE-2026-13955 was published Jul 1, 2026
Insufficient validation of untrusted input in WebShare in Google Chrome on Android prior to 150.0... Low Unreviewed
CVE-2026-13939 was published Jul 1, 2026
Inappropriate implementation in Video Capture in Google Chrome on ChromeOS prior to 150.0.7871.47... Low Unreviewed
CVE-2026-13942 was published Jul 1, 2026
Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF (no shipped gadget affected) Low
CVE-2026-44778 was published for github.com/inspektor-gadget/inspektor-gadget (Go) Jun 22, 2026
A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0... Low Unreviewed
CVE-2026-12787 was published Jun 21, 2026
Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in... Low Unreviewed
CVE-2026-56325 was published Jun 20, 2026
BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing Low
CVE-2026-12566 was published for bbot (pip) Jun 18, 2026
sondt99 Credited to sondt99
In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input... Low Unreviewed
CVE-2026-0142 was published Jun 16, 2026
Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname Low
CVE-2026-54282 was published for Starlette (pip) Jun 15, 2026
nic-lovin Credited to nic-lovin
python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters Low
CVE-2026-53537 was published for python-multipart (pip) Jun 15, 2026
0xkakash1 Credited to 0xkakash1 and sammiee5311 sammiee5311 sammiee5311
Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowed a... Low Unreviewed
CVE-2026-12017 was published Jun 12, 2026
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an... Low Unreviewed
CVE-2026-48289 was published Jun 9, 2026
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an... Low Unreviewed
CVE-2026-48288 was published Jun 9, 2026
Improper input validation in Microsoft Azure Attestation service and Device Health Attestation... Low Unreviewed
CVE-2026-45642 was published Jun 9, 2026
Authenticated administrators connected to the local network can gain elevated access to the... Low Unreviewed
CVE-2026-0410 was published Jun 9, 2026
Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 149.0.7827... Low Unreviewed
CVE-2026-11691 was published Jun 9, 2026
Insufficient validation of untrusted input in Dawn in Google Chrome on macOS prior to 149.0.7827... Low Unreviewed
CVE-2026-11686 was published Jun 9, 2026
Out of bounds read in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who... Low Unreviewed
CVE-2026-11675 was published Jun 9, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database