Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,455
Maven
5,000+
npm
5,000+
NuGet
1,090
pip
5,000+
Pub
13
RubyGems
1,135
Rust
1,509
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

3,136 advisories

Loading
Flowise before 3.1.0 contains a path traversal vulnerability in Faiss and SimpleStore vector... Moderate Unreviewed
CVE-2026-56273 was published Jul 8, 2026
The Bulk Order Update for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Read... Moderate Unreviewed
CVE-2026-14500 was published Jul 8, 2026
A validation vulnerability has been identified in certain web features related to file management... Moderate Unreviewed
CVE-2026-7185 was published Jul 6, 2026
A weakness has been identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to... Moderate Unreviewed
CVE-2026-14636 was published Jul 4, 2026
A security flaw has been discovered in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to... Moderate Unreviewed
CVE-2026-14635 was published Jul 4, 2026
A vulnerability was detected in NousResearch hermes-agent up to 2026.5.16. This impacts the... Moderate Unreviewed
CVE-2026-14628 was published Jul 4, 2026
Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components... Moderate Unreviewed
CVE-2026-28705 was published Jul 3, 2026
The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2026-9145 was published Jul 2, 2026
HashiCorp Vault and Vault Enterprise prior to 2.0.1 audit device validation logic did not... Moderate Unreviewed
CVE-2026-5051 was published Jul 1, 2026
MCO is vulnerable to Path Disclosure and Path Traversal in file handling functionality related to... Moderate Unreviewed
CVE-2026-53906 was published Jul 1, 2026
ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or... Moderate Unreviewed
CVE-2026-56377 was published Jul 1, 2026
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive... Moderate Unreviewed
CVE-2026-11595 was published Jun 30, 2026
Vibe-Trading before 0.1.10 contains a path traversal vulnerability that allows attackers to write... Moderate Unreviewed
CVE-2026-58173 was published Jun 30, 2026
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a... Moderate Unreviewed
CVE-2026-48314 was published Jun 30, 2026
A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL... Moderate Unreviewed
CVE-2026-58015 was published Jun 30, 2026
Net::BitTorrent versions through 2.0.1 for Perl write files outside the download directory via... Moderate Unreviewed
CVE-2026-57079 was published Jun 30, 2026
The PixMagix – WordPress Image Editor plugin for WordPress is vulnerable to Directory Traversal... Moderate Unreviewed
CVE-2026-11367 was published Jun 30, 2026
A path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5... Moderate Unreviewed
CVE-2026-43732 was published Jun 29, 2026
Improper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed... Moderate Unreviewed
CVE-2026-13748 was published Jun 29, 2026
A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or... Moderate Unreviewed
CVE-2026-57966 was published Jun 29, 2026
A vulnerability was found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.04-jdk8-SNAPSHOT. The... Moderate Unreviewed
CVE-2026-13528 was published Jun 29, 2026
A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function... Moderate Unreviewed
CVE-2026-13503 was published Jun 28, 2026
Patool before 4.0.5 contains a path traversal vulnerability in the safe_extract() function in... Moderate Unreviewed
CVE-2026-29509 was published Jun 26, 2026
Unauthenticated Arbitrary File Deletion in ShortPixel Adaptive Images <= 3.11.4 versions. Moderate Unreviewed
CVE-2026-56066 was published Jun 26, 2026
The Mattermost Go module github.com/mattermost/mattermost/server/public versions < v0.1.22 fail... Moderate Unreviewed
CVE-2026-13426 was published Jun 26, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database