Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

13,628 advisories

Loading
LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores Moderate
CVE-2026-115883 was published for langgraph-checkpoint-postgres (pip) Oct 23, 2026
VuxNx Credited to VuxNx
Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipient Moderate
GHSA-8c8m-p3m8-cjg8 was published for nodemailer (npm) Oct 23, 2026
Nodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipient Moderate
GHSA-m943-m63m-w62w was published for nodemailer (npm) Oct 23, 2026
Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name Moderate
GHSA-85x2-q946-cp5h was published for nodemailer (npm) Oct 23, 2026
fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization Moderate
CVE-2026-110180 was published for fast-uri (npm) Oct 23, 2026
UlisesGascon Credited to UlisesGascon and mcollina mcollina mcollina
An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of... Critical Unreviewed
CVE-2026-115547 was published Oct 23, 2026
Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow... Critical Unreviewed
CVE-2026-115384 was published Oct 22, 2026
A flaw has been found in subhajitkhan online-clinic-management-system up to... Low Unreviewed
CVE-2026-115249 was published Oct 22, 2026
pypdf: Unvalidated JPEG image data loading Low
CVE-2026-113786 was published for pypdf (pip) Oct 21, 2026
A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects... High Unreviewed
CVE-2026-76505 was published Oct 21, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, engineering... High Unreviewed
CVE-2026-76476 was published Oct 21, 2026
A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture... Moderate Unreviewed
CVE-2026-76462 was published Oct 21, 2026
The product failed to enforce validation constraints on user-supplied input in URL parameters,... Moderate Unreviewed
CVE-2024-6423 was published Oct 21, 2026
In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of... High Unreviewed
CVE-2026-110938 was published Oct 21, 2026
Coraza from 3.0.0 before 3.8.1 has a JSON body processor that flattens nested properties into dot... Moderate Unreviewed
CVE-2026-114099 was published Oct 21, 2026
Coraza before 3.8.1 extracts multipart upload filenames with Go's mime.ParseMediaType, which... Moderate Unreviewed
CVE-2026-114101 was published Oct 21, 2026
Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body... Moderate Unreviewed
CVE-2026-114100 was published Oct 21, 2026
Vyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such... Moderate Unreviewed
CVE-2020-37289 was published Oct 21, 2026
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:... High Unreviewed
CVE-2026-91457 was published Oct 21, 2026
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:... High Unreviewed
CVE-2026-91458 was published Oct 21, 2026
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... Moderate Unreviewed
CVE-2026-91411 was published Oct 21, 2026
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... High Unreviewed
CVE-2026-91415 was published Oct 21, 2026
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:... High Unreviewed
CVE-2026-91405 was published Oct 21, 2026
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:... High Unreviewed
CVE-2026-91406 was published Oct 21, 2026
Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed... High Unreviewed
CVE-2026-113334 was published Oct 21, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database