Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,636
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,529
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

4,407 advisories

Loading
Unauthenticated Cross Site Scripting (XSS) in Swatchly – WooCommerce Variation Swatches for... High Unreviewed
CVE-2026-66605 was published Aug 20, 2026
Unauthenticated Cross Site Scripting (XSS) in SmartSMTP <= 1.2.0 versions. High Unreviewed
CVE-2026-66606 was published Aug 20, 2026
Unauthenticated Cross Site Scripting (XSS) in Advance Product Search <= 1.4.8 versions. High Unreviewed
CVE-2026-66607 was published Aug 20, 2026
Unauthenticated Cross Site Scripting (XSS) in B2BKing Premium <= 5.6.07 versions. High Unreviewed
CVE-2026-66598 was published Aug 20, 2026
Unauthenticated Cross Site Scripting (XSS) in Form Maker by 10Web <= 1.15.46 versions. High Unreviewed
CVE-2026-66616 was published Aug 20, 2026
Unauthenticated Cross Site Scripting (XSS) in Podlove Podcast Publisher <= 4.5.4 versions. High Unreviewed
CVE-2026-66615 was published Aug 20, 2026
Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.2 versions. High Unreviewed
CVE-2026-66614 was published Aug 20, 2026
Unauthenticated Cross Site Scripting (XSS) in Paymob for WooCommerce <= 4.1.10 versions. High Unreviewed
CVE-2026-66611 was published Aug 20, 2026
Unauthenticated Cross Site Scripting (XSS) in Flatastic <= 2.0 versions. High Unreviewed
CVE-2026-66673 was published Aug 20, 2026
Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions. High Unreviewed
CVE-2026-66604 was published Aug 20, 2026
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.4 versions. High Unreviewed
CVE-2026-66597 was published Aug 20, 2026
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.1 versions. High Unreviewed
CVE-2026-66581 was published Aug 20, 2026
Unauthenticated Cross Site Scripting (XSS) in Tagembed <= 7.4 versions. High Unreviewed
CVE-2026-66590 was published Aug 20, 2026
Unauthenticated Cross Site Scripting (XSS) in TranslatePress <= 3.3.2 versions. High Unreviewed
CVE-2026-66582 was published Aug 20, 2026
Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 - The... High Unreviewed
CVE-2026-75948 was published Aug 20, 2026
Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart... High Unreviewed
CVE-2026-76564 was published Aug 20, 2026
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the ... High Unreviewed
CVE-2026-76333 was published Aug 20, 2026
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the ... High Unreviewed
CVE-2026-76325 was published Aug 20, 2026
Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions. High Unreviewed
CVE-2026-73184 was published Aug 19, 2026
Unauthenticated Cross Site Scripting (XSS) in BBQ Pro <= 3.9 versions. High Unreviewed
CVE-2026-73182 was published Aug 19, 2026
Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions. High Unreviewed
CVE-2026-73354 was published Aug 19, 2026
Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions. High Unreviewed
CVE-2026-66596 was published Aug 19, 2026
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions. High Unreviewed
CVE-2026-61986 was published Aug 19, 2026
The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is... High Unreviewed
CVE-2026-15780 was published Aug 19, 2026
The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is... High Unreviewed
CVE-2026-75981 was published Aug 19, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database