Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,455
Maven
5,000+
npm
5,000+
NuGet
1,090
pip
5,000+
Pub
13
RubyGems
1,135
Rust
1,509
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

580 advisories

Loading
GNU Bison allows for an execution of an arbitrary program during HTML report generation due to... Moderate Unreviewed
CVE-2026-56389 was published Jul 29, 2026
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary... Moderate Unreviewed
CVE-2026-15069 was published Jul 17, 2026
Privilege escalation in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0... Moderate Unreviewed
CVE-2026-14852 was published Jul 14, 2026
Milestone has released a new version of XProtect® (and several cumulative patch updates) which... Moderate Unreviewed
CVE-2026-3014 was published Jul 14, 2026
A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software... Moderate Unreviewed
CVE-2026-0286 was published Jul 9, 2026
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0... Moderate Unreviewed
CVE-2026-49813 was published Jul 3, 2026
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0... Moderate Unreviewed
CVE-2026-54483 was published Jul 3, 2026
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0... Moderate Unreviewed
CVE-2026-26355 was published Jul 3, 2026
OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows... Moderate Unreviewed
CVE-2026-8664 was published Jun 25, 2026
OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows... Moderate Unreviewed
CVE-2026-8658 was published Jun 25, 2026
OS Command Injection vulnerability in Rapid7 InsightConnect RPM Plugin on Linux allows... Moderate Unreviewed
CVE-2026-8663 was published Jun 25, 2026
OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows... Moderate Unreviewed
CVE-2026-8659 was published Jun 25, 2026
Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory... Moderate Unreviewed
CVE-2026-57282 was published Jun 24, 2026
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated... Moderate Unreviewed
CVE-2026-0273 was published Jun 11, 2026
Improper neutralization of special elements in the built-in PAM provider password rotation... Moderate Unreviewed
CVE-2026-10544 was published Jun 8, 2026
A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in... Moderate Unreviewed
CVE-2026-10805 was published Jun 4, 2026
Insufficient sanitization of volume paths in Netatalk 3.1.0 through 4.4.2 allows a local... Moderate Unreviewed
CVE-2026-44076 was published May 21, 2026
A vulnerability in the BrowserBot component of Cisco ThousandEyes Enterprise Agent could have... Moderate Unreviewed
CVE-2026-20206 was published May 20, 2026
A command injection vulnerability exists in Panabit PAP-XM320 up to and including V7.7. The web... Moderate Unreviewed
CVE-2026-36827 was published May 19, 2026
Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an... Moderate Unreviewed
CVE-2026-0261 was published May 13, 2026
An improper neutralization of special elements used in an OS command ("OS Command Injection")... Moderate Unreviewed
CVE-2025-53680 was published May 12, 2026
An improper neutralization of special elements used in an os command ('os command injection')... Moderate Unreviewed
CVE-2025-53870 was published May 12, 2026
A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host... Moderate Unreviewed
CVE-2026-8273 was published May 11, 2026
Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do... Moderate Unreviewed
CVE-2022-45899 was published May 8, 2026
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel... Moderate Unreviewed
CVE-2026-0711 was published Apr 28, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database