Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
70
GitHub Actions
52
Go
3,894
Maven
5,000+
npm
5,000+
NuGet
963
pip
5,000+
Pub
13
RubyGems
1,061
Rust
1,373
Swift
54
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

26,131 advisories

Loading
A malicious actor with access to the network could exploit an Improper Input Validation... Critical Unreviewed
CVE-2026-34910 was published May 22, 2026
A malicious actor with access to the network could exploit a Path Traversal vulnerability found... Critical Unreviewed
CVE-2026-34909 was published May 22, 2026
A malicious actor with access to the network and high privileges could exploit an Improper Input... Critical Unreviewed
CVE-2026-33000 was published May 22, 2026
A malicious actor with access to the network could exploit an Improper Access Control... Critical Unreviewed
CVE-2026-34908 was published May 22, 2026
The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing... Critical Unreviewed
CVE-2026-6960 was published May 22, 2026
Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the... Critical Unreviewed
CVE-2026-8134 was published May 21, 2026
Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host,... Critical Unreviewed
CVE-2026-48242 was published May 21, 2026
Open ISES Tickets before 3.44.2 contains hardcoded MySQL database credentials in loader.php (a... Critical Unreviewed
CVE-2026-48241 was published May 21, 2026
Deserialization of untrusted data in Apache Fory PyFory. PyFory's ReduceSerializer could bypass... Critical Unreviewed
CVE-2026-48207 was published May 21, 2026
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2026-39531 was published May 21, 2026
A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to... Critical Unreviewed
CVE-2025-71210 was published May 21, 2026
A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to... Critical Unreviewed
CVE-2025-71211 was published May 21, 2026
The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up... Critical Unreviewed
CVE-2026-5118 was published May 21, 2026
Honeywell Control Network Module (CNM) contains command injection vulnerability in the web... Critical Unreviewed
CVE-2026-5433 was published May 21, 2026
A heap-based buffer overflow in the CNID daemon comm_rcv() function in Netatalk 2.0.0 through 4.4... Critical Unreviewed
CVE-2026-44050 was published May 21, 2026
The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote... Critical Unreviewed
CVE-2026-6279 was published May 21, 2026
LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as... Critical Unreviewed
CVE-2026-48172 was published May 21, 2026
A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP... Critical Unreviewed
CVE-2026-9152 was published May 21, 2026
Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. ... Critical Unreviewed
CVE-2026-47372 was published May 21, 2026
A path traversal vulnerability exists in the Altium Enterprise Server Viewer StorageController... Critical Unreviewed
CVE-2026-9129 was published May 20, 2026
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential... Critical Unreviewed
CVE-2026-9139 was published May 20, 2026
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains an authentication bypass... Critical Unreviewed
CVE-2026-9141 was published May 20, 2026
A potential security vulnerability has been identified in the HP Linux Imaging and Printing... Critical Unreviewed
CVE-2026-8631 was published May 20, 2026
Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For... Critical Unreviewed
CVE-2026-45444 was published May 20, 2026
A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to... Critical Unreviewed
CVE-2026-9102 was published May 20, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database