Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,347
Maven
5,000+
npm
5,000+
NuGet
1,042
pip
5,000+
Pub
13
RubyGems
1,122
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

149,672 advisories

Loading
A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown... Moderate Unreviewed
CVE-2026-16327 was published Jul 21, 2026
AVideo versions from commit 0dbadbca through latest master contain a server-side request forgery... Moderate Unreviewed
CVE-2026-64626 was published Jul 21, 2026
Grav CMS scheduler-webhook plugin contains an authentication bypass vulnerability that allows... Moderate Unreviewed
CVE-2026-57852 was published Jul 21, 2026
A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted element... Moderate Unreviewed
CVE-2026-16324 was published Jul 21, 2026
An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to... Moderate Unreviewed
CVE-2026-51385 was published Jul 21, 2026
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is... Moderate Unreviewed
CVE-2026-12900 was published Jul 21, 2026
Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for... Moderate Unreviewed
CVE-2026-58624 was published Jul 20, 2026
HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows... Moderate Unreviewed
CVE-2026-63730 was published Jul 20, 2026
HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows... Moderate Unreviewed
CVE-2026-63731 was published Jul 20, 2026
Huginn through 2022.08.18 contains a server-side request forgery vulnerability in the fetch_url... Moderate Unreviewed
CVE-2026-63769 was published Jul 20, 2026
Adminer before 5.4.3 contains a cookie injection vulnerability that allows attackers to... Moderate Unreviewed
CVE-2026-63771 was published Jul 20, 2026
cal.diy through 6.2.0 contains an open redirect vulnerability in the conferencing OAuth callback... Moderate Unreviewed
CVE-2026-63768 was published Jul 20, 2026
The Joomla extension JMedia is vulnerable to an SSRF vulnerability. Remote-URL download could... Moderate Unreviewed
CVE-2026-60033 was published Jul 20, 2026
LimeSurvey through 6.17.10 and 7.0.4 contains a server-side request forgery vulnerability in the... Moderate Unreviewed
CVE-2026-63107 was published Jul 20, 2026
The Joomla extension Quix Page Builder Pro is vulnerable to an information disclosure. Raw... Moderate Unreviewed
CVE-2026-60031 was published Jul 20, 2026
The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS... Moderate Unreviewed
CVE-2026-60029 was published Jul 20, 2026
A CSRF vulnerability exists in the `zone-include.php` script in Revive Adserver 6.0.7. Linking... Moderate Unreviewed
CVE-2026-50743 was published Jul 20, 2026
Mettle SendPortal 3.0.1 and earlier contains a stored cross-site scripting (XSS) vulnerability in... Moderate Unreviewed
CVE-2026-26483 was published Jul 20, 2026
Improper neutralization of input during web page generation ('cross-site scripting')... Moderate Unreviewed
CVE-2026-6793 was published Jul 20, 2026
rConfig Core before 8.2.8 contains a privilege escalation vulnerability that allows authenticated... Moderate Unreviewed
CVE-2026-63102 was published Jul 20, 2026
Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain... Moderate Unreviewed
CVE-2026-51026 was published Jul 20, 2026
Client-Side Enforcement of Server-Side Security vulnerability in Gobito Informatics Technologies... Moderate Unreviewed
CVE-2026-13724 was published Jul 20, 2026
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN... Moderate Unreviewed
CVE-2026-26081 was published Jul 20, 2026
A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote... Moderate Unreviewed
CVE-2026-16277 was published Jul 20, 2026
Stored Cross-site Scripting (CWE-79) in the client-side report rendering functions (renderPreview... Moderate Unreviewed
CVE-2026-59238 was published Jul 20, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database