Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

3,251 advisories

Loading
Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot... Critical Unreviewed
CVE-2026-110886 was published Oct 18, 2026
Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong... High Unreviewed
CVE-2026-107436 was published Oct 18, 2026
The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP... Moderate Unreviewed
CVE-2026-81344 was published Oct 17, 2026
The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and... Critical Unreviewed
CVE-2026-104736 was published Oct 17, 2026
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is... High Unreviewed
CVE-2026-104734 was published Oct 17, 2026
10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows... Low Unreviewed
CVE-2026-111628 was published Oct 16, 2026
Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization... Unknown Unreviewed
CVE-2026-64610 was published Oct 16, 2026
Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms... High Unreviewed
CVE-2026-97296 was published Oct 16, 2026
The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for... Critical Unreviewed
CVE-2026-104730 was published Oct 16, 2026
The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via... High Unreviewed
CVE-2026-104932 was published Oct 16, 2026
A potential vulnerability was reported in the Lenovo Legion Zone application, distributed... High Unreviewed
CVE-2026-75941 was published Oct 16, 2026
LightLLM through 1.2.0 contains a denial of service vulnerability that allows unauthenticated... High Unreviewed
CVE-2026-111160 was published Oct 15, 2026
Dolibarr before 23.0.4 contains a PHP object injection vulnerability in jsonOrUnserialize() in... High Unreviewed
CVE-2026-110874 was published Oct 15, 2026
Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune... Critical Unreviewed
CVE-2026-110812 was published Oct 15, 2026
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist... High Unreviewed
CVE-2026-111094 was published Oct 15, 2026
Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link... Critical Unreviewed
CVE-2026-109686 was published Oct 15, 2026
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... Critical Unreviewed
CVE-2026-102469 was published Oct 15, 2026
ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows... High Unreviewed
CVE-2026-110761 was published Oct 14, 2026
Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object... Critical Unreviewed
CVE-2026-108291 was published Oct 14, 2026
Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object... High Unreviewed
CVE-2026-97278 was published Oct 14, 2026
Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows... High Unreviewed
CVE-2026-106599 was published Oct 14, 2026
HPE NonStop Middleware software has secret key handling and data deserialization vulnerability. High Unreviewed
CVE-2026-73793 was published Oct 14, 2026
The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in... High Unreviewed
CVE-2026-104764 was published Oct 14, 2026
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an... High Unreviewed
CVE-2026-93905 was published Oct 13, 2026
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code... High Unreviewed
CVE-2026-65674 was published Oct 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database