Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

12,067 advisories

Loading
An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of... Critical Unreviewed
CVE-2026-115547 was published Oct 23, 2026
Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow... Critical Unreviewed
CVE-2026-115384 was published Oct 22, 2026
A flaw has been found in subhajitkhan online-clinic-management-system up to... Low Unreviewed
CVE-2026-115249 was published Oct 22, 2026
A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects... High Unreviewed
CVE-2026-76505 was published Oct 21, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, engineering... High Unreviewed
CVE-2026-76476 was published Oct 21, 2026
A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture... Moderate Unreviewed
CVE-2026-76462 was published Oct 21, 2026
The product failed to enforce validation constraints on user-supplied input in URL parameters,... Moderate Unreviewed
CVE-2024-6423 was published Oct 21, 2026
In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of... High Unreviewed
CVE-2026-110938 was published Oct 21, 2026
Coraza from 3.0.0 before 3.8.1 has a JSON body processor that flattens nested properties into dot... Moderate Unreviewed
CVE-2026-114099 was published Oct 21, 2026
Coraza before 3.8.1 extracts multipart upload filenames with Go's mime.ParseMediaType, which... Moderate Unreviewed
CVE-2026-114101 was published Oct 21, 2026
Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body... Moderate Unreviewed
CVE-2026-114100 was published Oct 21, 2026
Vyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such... Moderate Unreviewed
CVE-2020-37289 was published Oct 21, 2026
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:... High Unreviewed
CVE-2026-91457 was published Oct 21, 2026
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:... High Unreviewed
CVE-2026-91458 was published Oct 21, 2026
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... Moderate Unreviewed
CVE-2026-91411 was published Oct 21, 2026
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... High Unreviewed
CVE-2026-91415 was published Oct 21, 2026
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:... High Unreviewed
CVE-2026-91405 was published Oct 21, 2026
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:... High Unreviewed
CVE-2026-91406 was published Oct 21, 2026
Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed... High Unreviewed
CVE-2026-113334 was published Oct 21, 2026
Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote... High Unreviewed
CVE-2026-113306 was published Oct 21, 2026
Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote... Critical Unreviewed
CVE-2026-113328 was published Oct 21, 2026
Improper input validation in Views in Google Chrome prior to 156.0.8078.47 allowed a remote... High Unreviewed
CVE-2026-113316 was published Oct 21, 2026
Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote... High Unreviewed
CVE-2026-113294 was published Oct 21, 2026
Improper input validation in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a... High Unreviewed
CVE-2026-113289 was published Oct 21, 2026
Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47... High Unreviewed
CVE-2026-113292 was published Oct 21, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database