Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

10,061 advisories

Loading
LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows... High Unreviewed
CVE-2026-111723 was published Oct 16, 2026
EFAK through 5.1.0 contains a missing authorization vulnerability that allows authenticated low... High Unreviewed
CVE-2026-111681 was published Oct 16, 2026
Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows... Moderate Unreviewed
CVE-2026-111683 was published Oct 16, 2026
Ekko Studio through 0.7.36 contains a missing authorization vulnerability that allows any... Moderate Unreviewed
CVE-2026-111679 was published Oct 16, 2026
EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated... High Unreviewed
CVE-2026-111682 was published Oct 16, 2026
ClickVisual through 1.1.2 contains a missing authorization vulnerability in the /api/v2/reports... Moderate Unreviewed
CVE-2026-111670 was published Oct 16, 2026
Piranha CMS through 12.2 contains a missing authorization vulnerability in the Piranha.Manager... Moderate Unreviewed
CVE-2026-111665 was published Oct 16, 2026
AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency... Moderate Unreviewed
CVE-2026-111668 was published Oct 16, 2026
Engineercms through 2.0.5 contains a missing authorization vulnerability in AttachController... Moderate Unreviewed
CVE-2026-111652 was published Oct 16, 2026
sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell ... High Unreviewed
CVE-2026-111638 was published Oct 16, 2026
SurveyKing before 1.13.0 contains a missing authorization vulnerability that allows... High Unreviewed
CVE-2026-111646 was published Oct 16, 2026
Distributor before 2.3.2 contains a missing authorization vulnerability that allows Contributor... Moderate Unreviewed
CVE-2026-111631 was published Oct 16, 2026
10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajax_push() that... Moderate Unreviewed
CVE-2026-111625 was published Oct 16, 2026
Huly Platform through 0.7.432 contains a missing authorization vulnerability that allows any... High Unreviewed
CVE-2026-111606 was published Oct 16, 2026
Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post... High Unreviewed
CVE-2026-111396 was published Oct 16, 2026
Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith... Moderate Unreviewed
CVE-2026-111409 was published Oct 16, 2026
Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the... Unknown Unreviewed
CVE-2026-63619 was published Oct 16, 2026
Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting... Moderate Unreviewed
CVE-2026-110900 was published Oct 16, 2026
Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows... Moderate Unreviewed
CVE-2026-110380 was published Oct 16, 2026
Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite... Moderate Unreviewed
CVE-2026-111397 was published Oct 16, 2026
Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting... Moderate Unreviewed
CVE-2026-110896 was published Oct 16, 2026
Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id})... High Unreviewed
CVE-2026-109119 was published Oct 16, 2026
The Squeeze WordPress plugin before 1.8.1 does not perform a capability check on one of its AJAX... Moderate Unreviewed
CVE-2026-110029 was published Oct 16, 2026
Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail... Moderate Unreviewed
CVE-2026-18799 was published Oct 16, 2026
The Wp Map Block plugin for WordPress is vulnerable to unauthorized modification of data due to a... Moderate Unreviewed
CVE-2026-19798 was published Oct 16, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database