Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,608
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

1,488 advisories

Loading
Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection... Moderate Unreviewed
CVE-2026-82476 was published Aug 29, 2026
In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers... Moderate Unreviewed
CVE-2026-82477 was published Aug 29, 2026
IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable to server-side request forgery (SSRF). This... Moderate Unreviewed
CVE-2026-18545 was published Aug 29, 2026
The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all... Moderate Unreviewed
CVE-2026-5096 was published Aug 28, 2026
A server-ide request forgery (SSRF) vulnerability in webhook in Synology Chat Server before 2.4.5... Moderate Unreviewed
CVE-2026-9491 was published Aug 28, 2026
wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled... Moderate Unreviewed
CVE-2026-82081 was published Aug 28, 2026
A server-side request forgery (SSRF) vulnerability WatchGuard Dimension FTP Server Test... Moderate Unreviewed
CVE-2026-78499 was published Aug 28, 2026
A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Remote Backup Connection... Moderate Unreviewed
CVE-2026-78495 was published Aug 28, 2026
A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Email Server Test... Moderate Unreviewed
CVE-2026-78498 was published Aug 28, 2026
A vulnerability was determined in cyberchitta scrapling-fetch-mcp up to 0.2.2. The impacted... Moderate Unreviewed
CVE-2026-81848 was published Aug 28, 2026
AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL... Moderate Unreviewed
CVE-2026-81678 was published Aug 27, 2026
JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted... Moderate Unreviewed
CVE-2026-59278 was published Aug 27, 2026
An unauthenticated remote attacker who can send a single UDP packet to a Spring Integration UDP... Moderate Unreviewed
CVE-2026-47861 was published Aug 27, 2026
A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected... Moderate Unreviewed
CVE-2026-81421 was published Aug 27, 2026
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery ... Moderate Unreviewed
CVE-2026-71172 was published Aug 26, 2026
utcp-gql SSRF: CVE-2026-44661 fix not applied to the GraphQL and WebSocket plugins Moderate
CVE-2026-12210 was published for utcp-gql (pip) Aug 25, 2026
hariantara Credited to hariantara
A server-side request forgery (SSRF) vulnerability was found in galaxy_ng, the Ansible Galaxy... Moderate Unreviewed
CVE-2026-79717 was published Aug 25, 2026
PraisonAI vulnerable to Server-Side Request Forgery via DNS rebinding bypass in webhook_url validation Moderate
CVE-2026-55535 was published for PraisonAI (pip) Aug 25, 2026
vndasunkid Credited to vndasunkid
Ech0 through 4.2.1 contains a server-side request forgery vulnerability in the validateWebhookURL... Moderate Unreviewed
CVE-2026-79671 was published Aug 25, 2026
Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's... Moderate Unreviewed
CVE-2026-34964 was published Aug 25, 2026
Subscriber Server Side Request Forgery (SSRF) in FluentCRM Pro <= 3.1.12 versions. Moderate Unreviewed
CVE-2026-78277 was published Aug 24, 2026
Contributor Server Side Request Forgery (SSRF) in Shared Files <= 1.7.69 versions. Moderate Unreviewed
CVE-2026-78269 was published Aug 24, 2026
BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks... Moderate Unreviewed
CVE-2026-78205 was published Aug 24, 2026
A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function... Moderate Unreviewed
CVE-2026-78061 was published Aug 23, 2026
NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF)... Moderate Unreviewed
CVE-2026-63311 was published Aug 22, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database