Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

10,066 advisories

Loading
Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting... Moderate Unreviewed
CVE-2026-110896 was published Oct 16, 2026
Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id})... High Unreviewed
CVE-2026-109119 was published Oct 16, 2026
The Squeeze WordPress plugin before 1.8.1 does not perform a capability check on one of its AJAX... Moderate Unreviewed
CVE-2026-110029 was published Oct 16, 2026
Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail... Moderate Unreviewed
CVE-2026-18799 was published Oct 16, 2026
The Wp Map Block plugin for WordPress is vulnerable to unauthorized modification of data due to a... Moderate Unreviewed
CVE-2026-19798 was published Oct 16, 2026
Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail... Moderate Unreviewed
CVE-2026-18795 was published Oct 16, 2026
Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting... Moderate Unreviewed
CVE-2026-110366 was published Oct 16, 2026
The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization... Moderate Unreviewed
CVE-2026-110014 was published Oct 16, 2026
The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2026-107770 was published Oct 16, 2026
The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.2 does not perform a... Moderate Unreviewed
CVE-2026-109982 was published Oct 16, 2026
The Visual Form Builder WordPress plugin through 3.1 does not perform authorization or nonce... Moderate Unreviewed
CVE-2026-105973 was published Oct 16, 2026
The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to... High Unreviewed
CVE-2026-107659 was published Oct 16, 2026
The FunnelKit – Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to... High Unreviewed
CVE-2026-107746 was published Oct 16, 2026
The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all... High Unreviewed
CVE-2026-110590 was published Oct 16, 2026
The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in... Moderate Unreviewed
CVE-2026-110019 was published Oct 16, 2026
The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to... Moderate Unreviewed
CVE-2026-110721 was published Oct 16, 2026
A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of... Moderate Unreviewed
CVE-2026-109812 was published Oct 16, 2026
A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client,... High Unreviewed
CVE-2026-92629 was published Oct 16, 2026
Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any... Moderate Unreviewed
CVE-2026-111353 was published Oct 16, 2026
Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer... Low Unreviewed
CVE-2026-111350 was published Oct 16, 2026
Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer... Moderate Unreviewed
CVE-2026-111349 was published Oct 16, 2026
pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that... Moderate Unreviewed
CVE-2026-111343 was published Oct 16, 2026
NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of... High Unreviewed
CVE-2026-111277 was published Oct 16, 2026
EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles... Critical Unreviewed
CVE-2026-105039 was published Oct 15, 2026
ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management... High Unreviewed
CVE-2026-106700 was published Oct 15, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database