Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

6,044 advisories

Loading
LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores Moderate
CVE-2026-115883 was published for langgraph-checkpoint-postgres (pip) Oct 23, 2026
VuxNx Credited to VuxNx
Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipient Moderate
GHSA-8c8m-p3m8-cjg8 was published for nodemailer (npm) Oct 23, 2026
Nodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipient Moderate
GHSA-m943-m63m-w62w was published for nodemailer (npm) Oct 23, 2026
Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name Moderate
GHSA-85x2-q946-cp5h was published for nodemailer (npm) Oct 23, 2026
fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization Moderate
CVE-2026-110180 was published for fast-uri (npm) Oct 23, 2026
UlisesGascon Credited to UlisesGascon and mcollina mcollina mcollina
A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture... Moderate Unreviewed
CVE-2026-76462 was published Oct 21, 2026
The product failed to enforce validation constraints on user-supplied input in URL parameters,... Moderate Unreviewed
CVE-2024-6423 was published Oct 21, 2026
Coraza from 3.0.0 before 3.8.1 has a JSON body processor that flattens nested properties into dot... Moderate Unreviewed
CVE-2026-114099 was published Oct 21, 2026
Coraza before 3.8.1 extracts multipart upload filenames with Go's mime.ParseMediaType, which... Moderate Unreviewed
CVE-2026-114101 was published Oct 21, 2026
Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body... Moderate Unreviewed
CVE-2026-114100 was published Oct 21, 2026
Vyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such... Moderate Unreviewed
CVE-2020-37289 was published Oct 21, 2026
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... Moderate Unreviewed
CVE-2026-91411 was published Oct 21, 2026
A denial-of-service issue was addressed with improved input validation. This issue is fixed in... Moderate Unreviewed
CVE-2026-86963 was published Oct 20, 2026
An integer underflow was addressed with improved input validation. This issue is fixed in macOS... Moderate Unreviewed
CVE-2026-86871 was published Oct 20, 2026
An input validation issue was addressed with improved input validation. This issue is fixed in... Moderate Unreviewed
CVE-2026-86875 was published Oct 20, 2026
The html_to_markdown expansion module in MISP Modules contains a server-side request forgery ... Moderate Unreviewed
CVE-2026-112991 was published Oct 20, 2026
Improper Input Validation vulnerability in Apache Camel Mail component. This issue affects... Moderate Unreviewed
CVE-2026-85314 was published Oct 19, 2026
Improper Input Validation vulnerability in Apache Camel Tika component. This issue affects... Moderate Unreviewed
CVE-2026-85249 was published Oct 19, 2026
Improper Input Validation vulnerability in Apache Camel Core component. This issue affects... Moderate Unreviewed
CVE-2026-85312 was published Oct 19, 2026
A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and... Moderate Unreviewed
CVE-2026-76739 was published Oct 19, 2026
Brian Mariani from DigitalCanion SA has discovered a  vulnerability in the domain creation... Moderate Unreviewed
CVE-2026-108121 was published Oct 19, 2026
A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of... Moderate Unreviewed
CVE-2026-111869 was published Oct 18, 2026
FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam... Moderate Unreviewed
CVE-2026-111374 was published Oct 16, 2026
kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path Moderate
CVE-2026-100347 was published for github.com/getkin/kin-openapi (Go) Oct 15, 2026
manus-use Credited to manus-use
A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory... Moderate Unreviewed
CVE-2026-79836 was published Oct 15, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database