Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,636
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,529
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

320 advisories

Loading
Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This... Critical Unreviewed
CVE-2026-73475 was published Sep 2, 2026
Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote... Critical Unreviewed
CVE-2026-84354 was published Sep 2, 2026
The Grav API plugin (getgrav/grav-plugin-api) before 1.0.18 does not apply the API-key scope cap... Critical Unreviewed
CVE-2026-80204 was published Aug 31, 2026
Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute(),... Critical Unreviewed
CVE-2026-80202 was published Aug 31, 2026
The getgrav/grav-plugin-api plugin before 1.0.18 does not enforce API-key scope in the... Critical Unreviewed
CVE-2026-80203 was published Aug 29, 2026
In Eclipse Lyo versions 2.0.0 to 7.0.0, OAuth server authorization checks can be bypassed when... Critical Unreviewed
CVE-2026-18918 was published Aug 28, 2026
Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers... Critical Unreviewed
CVE-2026-59270 was published Aug 27, 2026
A WebFlux application using functional endpoints and deployed with DispatcherServlet may be... Critical Unreviewed
CVE-2026-47892 was published Aug 27, 2026
Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue... Critical Unreviewed
CVE-2026-16644 was published Aug 26, 2026
Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65... Critical Unreviewed
CVE-2026-79152 was published Aug 25, 2026
Grav Login plugin versions before 1.0.16 fail to validate the target account's privilege level in... Critical Unreviewed
CVE-2026-56710 was published Aug 25, 2026
NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca... Critical Unreviewed
CVE-2026-19685 was published Aug 24, 2026
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a... Critical Unreviewed
CVE-2026-69555 was published Aug 21, 2026
A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a... Critical Unreviewed
CVE-2026-66792 was published Aug 17, 2026
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege... Critical Unreviewed
CVE-2026-19598 was published Aug 15, 2026
In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the... Critical Unreviewed
CVE-2026-71193 was published Aug 13, 2026
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could... Critical Unreviewed
CVE-2026-71398 was published Aug 11, 2026
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in... Critical Unreviewed
CVE-2026-71362 was published Aug 11, 2026
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could... Critical Unreviewed
CVE-2026-27302 was published Aug 11, 2026
is affected by an Incorrect Authorization vulnerability that could result in a Security feature... Critical Unreviewed
CVE-2026-71384 was published Aug 11, 2026
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. ... Critical Unreviewed
CVE-2026-13737 was published Aug 11, 2026
CommServe contained an authorization bypass vulnerability affecting a limited set of command... Critical Unreviewed
CVE-2026-13738 was published Aug 11, 2026
Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control. The... Critical Unreviewed
CVE-2026-52466 was published Aug 6, 2026
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could... Critical Unreviewed
CVE-2026-48333 was published Aug 4, 2026
ArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFINE... Critical Unreviewed
CVE-2026-67341 was published Aug 1, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database