Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

1,185 advisories

Loading
An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of... Critical Unreviewed
CVE-2026-115547 was published Oct 23, 2026
Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow... Critical Unreviewed
CVE-2026-115384 was published Oct 22, 2026
Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote... Critical Unreviewed
CVE-2026-113328 was published Oct 21, 2026
Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed... Critical Unreviewed
CVE-2026-113252 was published Oct 21, 2026
Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote... Critical Unreviewed
CVE-2026-113235 was published Oct 21, 2026
Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote... Critical Unreviewed
CVE-2026-113078 was published Oct 21, 2026
Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote... Critical Unreviewed
CVE-2026-113084 was published Oct 21, 2026
Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a... Critical Unreviewed
CVE-2026-113089 was published Oct 21, 2026
Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote... Critical Unreviewed
CVE-2026-113023 was published Oct 21, 2026
Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote... Critical Unreviewed
CVE-2026-113020 was published Oct 21, 2026
Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution Critical
CVE-2026-96620 was published for claude-agent-sdk (pip) Oct 16, 2026
Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote... Critical Unreviewed
CVE-2026-110916 was published Oct 16, 2026
ColdFusion is affected by an Improper Input Validation vulnerability that could result in... Critical Unreviewed
CVE-2026-106619 was published Oct 13, 2026
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could... Critical Unreviewed
CVE-2026-106626 was published Oct 13, 2026
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could... Critical Unreviewed
CVE-2026-105895 was published Oct 13, 2026
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to... Critical Unreviewed
CVE-2026-97805 was published Oct 13, 2026
Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in... Critical Unreviewed
CVE-2026-92464 was published Oct 13, 2026
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized... Critical Unreviewed
CVE-2026-70024 was published Oct 13, 2026
ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA kernel without... Critical Unreviewed
CVE-2026-84286 was published Oct 12, 2026
Hazelcast allows arbitrary member memory access by low-privileged client Critical
CVE-2026-107726 was published for com.hazelcast:hazelcast (Maven) Oct 8, 2026
k-jamroz Credited to k-jamroz
Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a... Critical Unreviewed
CVE-2026-106414 was published Oct 6, 2026
Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from... Critical Unreviewed
CVE-2025-71383 was published Oct 6, 2026
Improper input validation in DHAgreement.CalculateAgreement (MTI/A0 two-pass Diffie-Hellman) in... Critical Unreviewed
CVE-2026-63569 was published Oct 2, 2026
Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4 and... Critical Unreviewed
CVE-2026-100787 was published Sep 29, 2026
Authlib (v1.7.2 and below) contains a signature verification bypass vulnerability. The... Critical Unreviewed
CVE-2026-96760 was published Sep 28, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database