Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,608
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

1,936 advisories

Loading
DataEase before 2.10.26 contains multiple access control defects in the sharing link module.... Moderate Unreviewed
CVE-2026-82879 was published Aug 31, 2026
ToolJet before v3.16.208 contains an authorization bypass vulnerability in TooljetDB controller... Moderate Unreviewed
CVE-2026-82875 was published Aug 31, 2026
GROWI contains an incorrect authorization vulnerability. If this vulnerability is exploited, an... Moderate Unreviewed
CVE-2026-68951 was published Aug 31, 2026
The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an... Moderate Unreviewed
CVE-2026-77786 was published Aug 29, 2026
SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets Moderate
CVE-2026-55873 was published for github.com/seaweedfs/seaweedfs (Go) Aug 28, 2026
TA-MU-TA Credited to TA-MU-TA
Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to... Moderate Unreviewed
CVE-2026-62904 was published Aug 28, 2026
Snipe-IT has incorrect permission for legacy license checkin API Moderate
CVE-2026-55479 was published for snipe/snipe-it (Composer) Aug 28, 2026
Mitchell45 Credited to Mitchell45
Snipe-IT's import created_by can be overwritten Moderate
CVE-2026-55475 was published for snipe/snipe-it (Composer) Aug 28, 2026
ashrexon Credited to ashrexon
Snipe-IT's API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation Moderate
CVE-2026-55472 was published for snipe/snipe-it (Composer) Aug 28, 2026
Mitchell45 Credited to Mitchell45
Snipe-IT has an authorization bypass on print inventory page Moderate
CVE-2026-55462 was published for snipe/snipe-it (Composer) Aug 28, 2026
mamdouhmahfouz Credited to mamdouhmahfouz
Vikunja has a project duplication bypasses write-permission check on the target parent project Moderate
CVE-2026-54766 was published for code.vikunja.io/api (Go) Aug 28, 2026
The updateWorkspace handler in mods/identity/src/workspaces/createUpdateWorkspace.ts in Fonoster... Moderate Unreviewed
CVE-2026-80209 was published Aug 27, 2026
The JetBackup WordPress plugin before 3.1.23.5 does not perform its multisite authorisation... Moderate Unreviewed
CVE-2026-19454 was published Aug 27, 2026
Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote... Moderate Unreviewed
CVE-2026-79258 was published Aug 25, 2026
Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote... Moderate Unreviewed
CVE-2026-79237 was published Aug 25, 2026
Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote... Moderate Unreviewed
CVE-2026-79248 was published Aug 25, 2026
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote... Moderate Unreviewed
CVE-2026-79262 was published Aug 25, 2026
Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote... Moderate Unreviewed
CVE-2026-79261 was published Aug 25, 2026
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote... Moderate Unreviewed
CVE-2026-79205 was published Aug 25, 2026
Incorrect authorization in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a... Moderate Unreviewed
CVE-2026-79217 was published Aug 25, 2026
Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65... Moderate Unreviewed
CVE-2026-79222 was published Aug 25, 2026
Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote... Moderate Unreviewed
CVE-2026-79238 was published Aug 25, 2026
Incorrect authorization in Browser in Google Chrome on on Android prior to 152.0.7977.65 allowed... Moderate Unreviewed
CVE-2026-79225 was published Aug 25, 2026
Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker... Moderate Unreviewed
CVE-2026-79211 was published Aug 25, 2026
Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65... Moderate Unreviewed
CVE-2026-79213 was published Aug 25, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database