Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,428
Maven
5,000+
npm
5,000+
NuGet
1,088
pip
5,000+
Pub
13
RubyGems
1,129
Rust
1,506
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

3,412 advisories

Loading
XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting... High Unreviewed
CVE-2026-15928 was published Jul 27, 2026
NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and... High Unreviewed
CVE-2026-17496 was published Jul 26, 2026
Reflected Cross-Site Scripting (CWE-79) in LWEB802 in Loytec LWEB-802 before 5.0.8 on all... High Unreviewed
CVE-2026-55730 was published Jul 24, 2026
Stored Cross-Site Scripting (CWE-79) in the OPC XML-DA server statistics in Loytec LIP-ME201C, L... High Unreviewed
CVE-2026-12496 was published Jul 24, 2026
A Cross-Site Scripting (XSS) vulnerability in Google Cloud Looker versions prior to 25.6.103, 25... High Unreviewed
CVE-2026-15810 was published Jul 24, 2026
The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site... High Unreviewed
CVE-2026-15401 was published Jul 24, 2026
Improper neutralization of input during web page generation ('cross-site scripting')... High Unreviewed
CVE-2026-15968 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in Dokan Pro <= 5.0.0 versions. High Unreviewed
CVE-2026-65492 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice <= 2.2.6 versions. High Unreviewed
CVE-2026-65510 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base & Education... High Unreviewed
CVE-2026-65511 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in Bookly <= 27.7 versions. High Unreviewed
CVE-2026-61944 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in Form Vibes – Database Manager for Forms <= 1.5.2... High Unreviewed
CVE-2026-61947 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.34.0 versions. High Unreviewed
CVE-2026-57809 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions. High Unreviewed
CVE-2026-57769 was published Jul 23, 2026
Subscriber Cross Site Scripting (XSS) in Slider Pro <= 4.8.13 versions. High Unreviewed
CVE-2026-57699 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in Smart Manager <= 8.90.0 versions. High Unreviewed
CVE-2026-57704 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions. High Unreviewed
CVE-2026-57701 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions. High Unreviewed
CVE-2026-57767 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in Breakdance <= 2.7.1 versions. High Unreviewed
CVE-2026-57735 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in Product Enquiry for WooCommerce <= 2.2.34.43 versions. High Unreviewed
CVE-2026-59512 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in Easy Form Builder <= 4.0.12 versions. High Unreviewed
CVE-2026-59517 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions. High Unreviewed
CVE-2026-57427 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions. High Unreviewed
CVE-2026-57428 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions. High Unreviewed
CVE-2026-57397 was published Jul 23, 2026
Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.9.1... High Unreviewed
CVE-2026-57370 was published Jul 23, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database