Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,636
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,529
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

1,576 advisories

Loading
Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens Moderate
CVE-2026-49447 was published for github.com/azukaar/cosmos-server (Go) Jul 28, 2026
sondt99 Credited to sondt99 and dungNHVhust dungNHVhust dungNHVhust
Pocket ID has a reauthentication bypass via one-time access token login — passkey step-up requirement defeated by JWT freshness check that accepts any login method Moderate
GHSA-hp74-gm6m-2qm5 was published for github.com/pocket-id/pocket-id/backend (Go) Jul 28, 2026
kodareef5 Credited to kodareef5
An authorization issue was addressed with improved state management. This issue is fixed in macOS... Moderate Unreviewed
CVE-2026-43766 was published Jul 27, 2026
The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership ... Moderate Unreviewed
CVE-2026-14568 was published Jul 27, 2026
The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2026-15348 was published Jul 23, 2026
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component:... Moderate Unreviewed
CVE-2026-60434 was published Jul 22, 2026
The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid... Moderate Unreviewed
CVE-2025-68640 was published Jul 21, 2026
A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown... Moderate Unreviewed
CVE-2026-16209 was published Jul 19, 2026
A vulnerability was found in newpanjing simpleui 2026.01.13. This affects the function self... Moderate Unreviewed
CVE-2026-16210 was published Jul 19, 2026
SurrealDB before 1.5.4 fails to properly validate authentication when a scope user switches... Moderate Unreviewed
CVE-2024-58363 was published Jul 18, 2026
A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This affects the function... Moderate Unreviewed
CVE-2026-16083 was published Jul 18, 2026
n8n contains an authentication bypass in the Chat Trigger node when configured with n8n User Auth... Moderate Unreviewed
CVE-2026-56353 was published Jul 15, 2026
A weakness has been identified in waooAI waoowaoo up to 0.4.1. Affected by this vulnerability is... Moderate Unreviewed
CVE-2026-15557 was published Jul 13, 2026
A vulnerability has been found in will-moss Isaiah up to 1.36.9. This affects an unknown function... Moderate Unreviewed
CVE-2026-15542 was published Jul 13, 2026
A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to... Moderate Unreviewed
CVE-2026-15491 was published Jul 12, 2026
vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions: *.*. Moderate Unreviewed
CVE-2026-15087 was published Jul 11, 2026
Capgo before 12.128.2 contains an improper validation vulnerability in the accept_invitation... Moderate Unreviewed
CVE-2026-56312 was published Jul 10, 2026
A vulnerability has been found in mettle sendportal up to 3.0.1. This issue affects the function... Moderate Unreviewed
CVE-2026-15192 was published Jul 9, 2026
Flask-Security-Too: WebAuthn reauthentication freshness bypass via cross-user assertion Moderate
GHSA-f66q-9rf6-8795 was published for Flask-Security-Too (pip) Jul 7, 2026
tonghuaroot Credited to tonghuaroot
A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.1.0. This issue affects... Moderate Unreviewed
CVE-2026-14714 was published Jul 5, 2026
A vulnerability was found in jairiidriss restaurant-website-php-mysql up to... Moderate Unreviewed
CVE-2026-14622 was published Jul 4, 2026
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program... Moderate Unreviewed
CVE-2026-58029 was published Jul 1, 2026
Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the... Moderate Unreviewed
CVE-2026-55955 was published Jun 29, 2026
A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown code of... Moderate Unreviewed
CVE-2026-13546 was published Jun 29, 2026
TLS 1.3 post-handshake authentication (PHA) issue where a server could accept a client's Finished... Moderate Unreviewed
CVE-2026-55962 was published Jun 26, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database