Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

29 advisories

Loading
Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege... High Unreviewed
CVE-2026-81452 was published Oct 16, 2026
In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd... Low Unreviewed
CVE-2026-106589 was published Oct 7, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... Low Unreviewed
CVE-2026-79944 was published Sep 9, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... Low Unreviewed
CVE-2026-79693 was published Sep 9, 2026
HCL IntelliOps Event Management (IEM) is affected by a least privileges violation which could... Moderate Unreviewed
CVE-2025-62299 was published Aug 20, 2026
Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege... High Unreviewed
CVE-2026-59915 was published Aug 18, 2026
Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper Link... Moderate Unreviewed
CVE-2026-49500 was published Aug 18, 2026
Kozou: Unauthenticated MCP HTTP server and bundled dev-stack hardening (DNS-rebinding, request-body limits, read-only reads, default network exposure) High
GHSA-v52w-28xh-v562 was published for @kozou/api (npm) Jun 19, 2026
Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator Moderate
CVE-2026-55226 was published for io.strimzi:strimzi (Maven) Jun 18, 2026
katheris Credited to katheris, ppatierno, and scholzj ppatierno ppatierno
scholzj scholzj
A vulnerability exists in iControl REST and the TMOS Shell (tmsh) where a highly privileged,... High Unreviewed
CVE-2026-39459 was published May 13, 2026
Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain a Least Privilege... Moderate Unreviewed
CVE-2026-32655 was published Apr 27, 2026
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during... High Unreviewed
CVE-2026-35535 was published Apr 3, 2026
A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the... High Unreviewed
CVE-2025-9711 was published Feb 3, 2026
The binary serving the web server and executing basically all actions launched from the Web UI is... High Unreviewed
CVE-2025-59106 was published Jan 26, 2026
Pepr Has Overly Permissive RBAC ClusterRole in Admin Mode Low
CVE-2026-23634 was published for pepr (npm) Jan 15, 2026
tghastings Credited to tghastings
In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub... Moderate Unreviewed
CVE-2025-68267 was published Dec 16, 2025
The Social Streams plugin for WordPress is vulnerable to privilege escalation in all versions up... High Unreviewed
CVE-2025-7722 was published Jul 23, 2025
Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between... High Unreviewed
CVE-2025-1384 was published Jul 14, 2025
Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation ... High Unreviewed
CVE-2025-47809 was published May 16, 2025
Harden-Runner allows evasion of 'disable-sudo' policy Moderate
CVE-2025-32955 was published for step-security/harden-runner (GitHub Actions) Apr 22, 2025
loresuso Credited to loresuso and darryk10 darryk10 darryk10
Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent... Moderate Unreviewed
CVE-2024-28829 was published Aug 20, 2024
Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability.... High Unreviewed
CVE-2024-27165 was published Jun 14, 2024
Veritas System Recovery before 23.2_Hotfix has incorrect permissions for the Veritas System... High Unreviewed
CVE-2024-35204 was published May 14, 2024
Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent... High Unreviewed
CVE-2024-28824 was published Mar 22, 2024
Least privilege violation in the Checkmk agent plugins mk_oracle, mk_oracle.ps1, and... High Unreviewed
CVE-2024-0638 was published Mar 22, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database