Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
101
GitHub Actions
54
Go
4,316
Maven
5,000+
npm
5,000+
NuGet
1,030
pip
5,000+
Pub
13
RubyGems
1,116
Rust
1,493
Swift
61
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

27,353 advisories

Loading
Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152,... Critical Unreviewed
CVE-2026-12294 was published Jun 16, 2026
Sandbox escape due to incorrect boundary conditions in the Networking component. This... Critical Unreviewed
CVE-2026-12297 was published Jun 16, 2026
Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152,... Critical Unreviewed
CVE-2026-12295 was published Jun 16, 2026
An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain... Critical Unreviewed
CVE-2026-13385 was published Jul 15, 2026
Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in... Critical Unreviewed
CVE-2026-12296 was published Jun 16, 2026
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop... Critical Unreviewed
CVE-2026-46316 was published Jun 9, 2026
Illustrator is affected by an Improper Input Validation vulnerability that could result in... Critical Unreviewed
CVE-2026-48334 was published Jul 15, 2026
The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that... Critical Unreviewed
CVE-2026-57827 was published Jul 11, 2026
In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: validate... Critical Unreviewed
CVE-2026-53043 was published Jun 24, 2026
ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command (... Critical Unreviewed
CVE-2026-48324 was published Jul 14, 2026
ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could... Critical Unreviewed
CVE-2026-48325 was published Jul 14, 2026
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege... Critical Unreviewed
CVE-2026-48321 was published Jul 14, 2026
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path... Critical Unreviewed
CVE-2026-48319 was published Jul 14, 2026
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path... Critical Unreviewed
CVE-2026-48318 was published Jul 14, 2026
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection')... Critical Unreviewed
CVE-2026-48322 was published Jul 14, 2026
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary... Critical Unreviewed
CVE-2026-48327 was published Jul 14, 2026
ColdFusion is affected by an Improper Input Validation vulnerability that could result in... Critical Unreviewed
CVE-2026-48284 was published Jul 14, 2026
Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote... Critical Unreviewed
CVE-2026-15773 was published Jul 14, 2026
Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could... Critical Unreviewed
CVE-2026-48358 was published Jul 14, 2026
Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ... Critical Unreviewed
CVE-2026-48359 was published Jul 14, 2026
Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability... Critical Unreviewed
CVE-2026-48356 was published Jul 14, 2026
Adobe Experience Manager is affected by a Server-Side Request Forgery (SSRF) vulnerability that... Critical Unreviewed
CVE-2026-48259 was published Jul 14, 2026
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance... Critical Unreviewed
CVE-2026-15409 was published Jul 14, 2026
The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to... Critical Unreviewed
CVE-2026-13001 was published Jul 14, 2026
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in... Critical Unreviewed
CVE-2026-53006 was published Jun 24, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database