Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

542 advisories

Loading
songquanpeng one-api has an issue that results in business logic errors Low
CVE-2026-11465 was published for github.com/songquanpeng/one-api (Go) Jun 8, 2026
A flaw has been found in Boost Serialization up to 1.91. The impacted element is an unknown... Low Unreviewed
CVE-2026-11460 was published Jun 7, 2026
Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic Low
CVE-2026-45723 was published for github.com/siderolabs/omni (Go) Jun 5, 2026
bugbunny-research Credited to bugbunny-research
Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53... Low Unreviewed
CVE-2026-11251 was published Jun 5, 2026
Insufficient validation of untrusted input in Loader in Google Chrome prior to 149.0.7827.53... Low Unreviewed
CVE-2026-11240 was published Jun 5, 2026
Insufficient validation of untrusted input in WebAuthentication in Google Chrome prior to 149.0... Low Unreviewed
CVE-2026-11244 was published Jun 5, 2026
FoundationAgents MetaGPT: Deserialization through flawed argument mapping via Message.check_instruct_content() Low
CVE-2026-10566 was published for metagpt (pip) Jun 2, 2026
Insufficient validation of untrusted input in iOS in Google Chrome on iOS prior to 148.0.7778.216... Low Unreviewed
CVE-2026-9950 was published May 29, 2026
Capsule Namespace Hijacking via subresource Low
CVE-2026-30963 was published for github.com/projectcapsule/capsule (Go) May 28, 2026
xy585 Credited to xy585
A security vulnerability has been detected in fraillt bitsery up to 5.2.4. Affected is the... Low Unreviewed
CVE-2026-9521 was published May 26, 2026
TCC-TRANSACTION has an Improper Input Validation vulnerability Low
CVE-2026-9497 was published for org.mengyun:tcc-transaction (Maven) May 26, 2026
in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. Low Unreviewed
CVE-2026-28751 was published May 19, 2026
A vulnerability was identified in Oinone Pamirs up to 7.2.0. This affects the function JsonUtils... Low Unreviewed
CVE-2026-8735 was published May 17, 2026
Insufficient validation of untrusted input in Skia in Google Chrome prior to 148.0.7778.168... Low Unreviewed
CVE-2026-8579 was published May 14, 2026
Insufficient validation of untrusted input in ReadingMode in Google Chrome on Mac prior to 148.0... Low Unreviewed
CVE-2026-8536 was published May 14, 2026
A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject... Low Unreviewed
CVE-2026-0238 was published May 13, 2026
Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and... Low Unreviewed
CVE-2026-34685 was published May 12, 2026
Vulnerability in Wikimedia Foundation AbuseFilter. This issue affects AbuseFilter: from * before... Low Unreviewed
CVE-2026-34086 was published May 11, 2026
container: pf Rule Injection via Domain Name Argument in `container system dns create --localhost` Command Low
GHSA-39g5-644c-qwcg was published for github.com/apple/container (Swift) May 7, 2026
XlabAITeam Credited to XlabAITeam, 0xmrma, keenanwgn, and A7um 0xmrma 0xmrma
keenanwgn keenanwgn A7um A7um
Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778... Low Unreviewed
CVE-2026-7966 was published May 6, 2026
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 148.0.7778.96... Low Unreviewed
CVE-2026-7965 was published May 6, 2026
Insufficient validation of untrusted input in CORS in Google Chrome prior to 148.0.7778.96... Low Unreviewed
CVE-2026-7968 was published May 6, 2026
Insufficient validation of untrusted input in COOP in Google Chrome prior to 148.0.7778.96... Low Unreviewed
CVE-2026-7945 was published May 6, 2026
Insufficient validation of untrusted input in Persistent Cache in Google Chrome prior to 148.0... Low Unreviewed
CVE-2026-7944 was published May 6, 2026
Grav has Insecure Deserialization in File Cache Low
CVE-2026-7317 was published for getgrav/grav (Composer) May 5, 2026
s4nntysec Credited to s4nntysec
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database