Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

29,943 advisories

Loading
The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all... Critical Unreviewed
CVE-2026-16310 was published Sep 6, 2026
A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer:... Critical Unreviewed
CVE-2026-86153 was published Sep 6, 2026
A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi... Critical Unreviewed
CVE-2026-86152 was published Sep 6, 2026
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to... Critical Unreviewed
CVE-2026-75816 was published Sep 6, 2026
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before... Critical Unreviewed
CVE-2026-86218 was published Sep 6, 2026
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the... Critical Unreviewed
CVE-2026-86148 was published Sep 6, 2026
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown... Critical Unreviewed
CVE-2026-86149 was published Sep 6, 2026
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function... Critical Unreviewed
CVE-2026-86151 was published Sep 6, 2026
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin... Critical Unreviewed
CVE-2026-86060 was published Sep 5, 2026
RouterOS does not compare the complete RSA public key when matching an SSH authentication request... Critical Unreviewed
CVE-2026-67276 was published Sep 5, 2026
WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows... Critical Unreviewed
CVE-2026-86189 was published Sep 5, 2026
WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that... Critical Unreviewed
CVE-2026-86190 was published Sep 5, 2026
The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for... Critical Unreviewed
CVE-2026-10196 was published Sep 5, 2026
Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot... Critical Unreviewed
CVE-2026-86184 was published Sep 5, 2026
AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that... Critical Unreviewed
CVE-2026-86124 was published Sep 5, 2026
Coolify through 4.3.17 contains an authentication bypass vulnerability in the OAuth callback... Critical Unreviewed
CVE-2026-86117 was published Sep 5, 2026
Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability... Critical Unreviewed
CVE-2026-86119 was published Sep 5, 2026
Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME... Critical Unreviewed
CVE-2026-86121 was published Sep 5, 2026
SQL Chat contains four unauthenticated API endpoints that accept client-supplied database... Critical Unreviewed
CVE-2026-86123 was published Sep 5, 2026
The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to... Critical Unreviewed
CVE-2024-11080 was published Sep 5, 2026
The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is... Critical Unreviewed
CVE-2026-83627 was published Sep 5, 2026
The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in... Critical Unreviewed
CVE-2026-13447 was published Sep 5, 2026
Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an... Critical Unreviewed
CVE-2026-75925 was published Sep 5, 2026
A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and... Critical Unreviewed
CVE-2026-81939 was published Sep 4, 2026
A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem... Critical Unreviewed
CVE-2026-78328 was published Sep 4, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database