Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,683
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,532
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

710 advisories

Loading
Kernel software installed and running inside a Guest VM may post improper commands to the GPU... Unknown Unreviewed
CVE-2026-45197 was published Sep 4, 2026
Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute... High Unreviewed
CVE-2026-85045 was published Sep 3, 2026
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise... High Unreviewed
CVE-2026-19118 was published Sep 2, 2026
A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename... Moderate Unreviewed
CVE-2026-18477 was published Aug 3, 2026
A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU... Critical Unreviewed
CVE-2026-78319 was published Sep 1, 2026
Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit... High Unreviewed
CVE-2026-78422 was published Aug 31, 2026
Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65... Moderate Unreviewed
CVE-2026-79089 was published Aug 25, 2026
Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped) Critical
CVE-2026-54754 was published for github.com/klever-io/klever-go (Go) Aug 28, 2026
fbsobreira Credited to fbsobreira
filebrowser from version 2.24.0 contains a race condition in the TUS upload handler that allows... Low Unreviewed
CVE-2026-82238 was published Aug 28, 2026
Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a... Moderate Unreviewed
CVE-2026-79046 was published Aug 25, 2026
Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who... Moderate Unreviewed
CVE-2026-79267 was published Aug 25, 2026
Crossplane's TOCTOU between cosign verification and image fetch in xpkg.CachedClient allows tag-based package install to bypass signature check High
GHSA-mf7q-r4rv-jv94 was published for github.com/crossplane/crossplane-runtime/v2 (Go) Aug 27, 2026
tonghuaroot Credited to tonghuaroot and bugbunny-research bugbunny-research bugbunny-research
Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker... Moderate Unreviewed
CVE-2026-79196 was published Aug 25, 2026
Race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker... Moderate Unreviewed
CVE-2026-78991 was published Aug 25, 2026
Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to... Moderate Unreviewed
CVE-2026-79017 was published Aug 25, 2026
Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who... Low Unreviewed
CVE-2026-78894 was published Aug 25, 2026
Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to... High Unreviewed
CVE-2026-79263 was published Aug 25, 2026
Race condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker... High Unreviewed
CVE-2026-79155 was published Aug 25, 2026
Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local... High Unreviewed
CVE-2026-79057 was published Aug 25, 2026
Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had... High Unreviewed
CVE-2026-79071 was published Aug 25, 2026
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating... High Unreviewed
CVE-2026-65183 was published Aug 26, 2026
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the... High Unreviewed
CVE-2015-3246 was published May 14, 2022
OpenClaw: Node pairing reconnection could confuse approval scope state Moderate
CVE-2026-53838 was published for openclaw (npm) Jul 2, 2026
YLChen-007 Credited to YLChen-007
Duplicate Advisory: OpenClaw: Node pairing reconnection could confuse approval scope state Moderate
GHSA-c85p-9pvr-f7f5 was published for openclaw (npm) Jun 13, 2026 • withdrawn
OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion High
CVE-2026-53831 was published for openclaw (npm) Jul 2, 2026
cantinagen Credited to cantinagen and Ellahinator Ellahinator Ellahinator
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database