Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,608
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

179 advisories

Loading
Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud... Low Unreviewed
CVE-2026-59291 was published Aug 27, 2026
HCL Connections is vulnerable to server-side request forgery (SSRF) when an internal server is... Low Unreviewed
CVE-2025-62341 was published Aug 27, 2026
Under specific circumstances, low-level user can run request to remote CocoaPods repos via JFrog... Low Unreviewed
CVE-2026-70548 was published Aug 25, 2026
The Eventin WordPress plugin before 4.1.21 does not validate a user-supplied webhook URL stored... Low Unreviewed
CVE-2026-13176 was published Aug 21, 2026
In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass... Low Unreviewed
CVE-2026-77648 was published Aug 21, 2026
n8n before 1.123.69, 2.33.4, and 2.34.1 contains an SSRF protection bypass in the OAuth2... Low Unreviewed
CVE-2026-77069 was published Aug 20, 2026
In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest... Low Unreviewed
CVE-2026-76361 was published Aug 20, 2026
MobSF has SSRF port restriction bypass in assetlinks_check Low
CVE-2026-68927 was published for mobsf (pip) Aug 18, 2026
DavidCarliez Credited to DavidCarliez
A vulnerability was found in Kira-Pgr PromptShopMCP up to... Low Unreviewed
CVE-2026-74842 was published Aug 17, 2026
A flaw has been found in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the... Low Unreviewed
CVE-2026-19984 was published Aug 17, 2026
A vulnerability was identified in graphlit graphlit-mcp-server 1.0.1. This affects the function... Low Unreviewed
CVE-2026-19957 was published Aug 17, 2026
A vulnerability was found in OpenBoxes up to 0.9.7. The impacted element is the function Upload... Low Unreviewed
CVE-2026-19927 was published Aug 16, 2026
A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is... Low Unreviewed
CVE-2026-19770 was published Aug 14, 2026
A security flaw has been discovered in eyaushev swagger-testcase-mcp... Low Unreviewed
CVE-2026-19765 was published Aug 14, 2026
A vulnerability was found in EnzoVezzaro mcp-dominican-layer up to... Low Unreviewed
CVE-2026-19752 was published Aug 14, 2026
A flaw has been found in EnzoVezzaro mcp-dominican-layer up to... Low Unreviewed
CVE-2026-19751 was published Aug 14, 2026
A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0... Low Unreviewed
CVE-2026-70467 was published Aug 12, 2026
The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the... Low Unreviewed
CVE-2026-12971 was published Aug 10, 2026
A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects... Low Unreviewed
CVE-2026-19375 was published Aug 10, 2026
A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the... Low Unreviewed
CVE-2026-12372 was published Aug 10, 2026
A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this... Low Unreviewed
CVE-2026-19373 was published Aug 10, 2026
A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get... Low Unreviewed
CVE-2026-19369 was published Aug 9, 2026
A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability... Low Unreviewed
CVE-2026-19367 was published Aug 9, 2026
A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some... Low Unreviewed
CVE-2026-19352 was published Aug 9, 2026
A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown... Low Unreviewed
CVE-2026-19340 was published Aug 9, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database