Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

2,641 advisories

Loading
The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary... Moderate Unreviewed
CVE-2026-107652 was published Oct 14, 2026
Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows... Moderate Unreviewed
CVE-2026-15468 was published Oct 14, 2026
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the... High Unreviewed
CVE-2026-63163 was published Oct 13, 2026
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in... High Unreviewed
CVE-2026-63153 was published Oct 13, 2026
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to... Moderate Unreviewed
CVE-2026-85873 was published Oct 13, 2026
Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a... High Unreviewed
CVE-2026-70185 was published Oct 13, 2026
Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows... High Unreviewed
CVE-2026-110238 was published Oct 13, 2026
QloApps through 1.7.0 contains a broken access control vulnerability that allows hotel-restricted... Moderate Unreviewed
CVE-2026-110226 was published Oct 13, 2026
Stonewuu ai-fusion-video through 1.2.0 contains an insecure direct object reference vulnerability... Moderate Unreviewed
CVE-2026-110213 was published Oct 13, 2026
Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that... Moderate Unreviewed
CVE-2026-110125 was published Oct 13, 2026
waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in... Moderate Unreviewed
CVE-2026-110126 was published Oct 13, 2026
FastBee through 2.1.0 contains an insecure direct object reference vulnerability in... High Unreviewed
CVE-2026-110124 was published Oct 13, 2026
waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the... Moderate Unreviewed
CVE-2026-110127 was published Oct 13, 2026
fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability... High Unreviewed
CVE-2026-110129 was published Oct 13, 2026
Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member... High Unreviewed
CVE-2026-110119 was published Oct 13, 2026
Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the after... Moderate Unreviewed
CVE-2026-110120 was published Oct 13, 2026
WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows... High Unreviewed
CVE-2026-110118 was published Oct 13, 2026
PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that... High Unreviewed
CVE-2026-110121 was published Oct 13, 2026
PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that... Moderate Unreviewed
CVE-2026-110122 was published Oct 13, 2026
RuoYi-Vue-Plus through 6.0.0 contains an insecure direct object reference vulnerability that... Low Unreviewed
CVE-2026-110106 was published Oct 13, 2026
PublicCMS through V6.202608.a contains an insecure direct object reference vulnerability in the... Moderate Unreviewed
CVE-2026-110113 was published Oct 13, 2026
Jorani before 1.0.4 contains an insecure direct object reference vulnerability that allows... Moderate Unreviewed
CVE-2026-110098 was published Oct 13, 2026
RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object reference vulnerability that... Low Unreviewed
CVE-2026-110107 was published Oct 13, 2026
ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference... Critical Unreviewed
CVE-2024-34323 was published Oct 13, 2026
Froxlor before 2.3.14 contains an insecure direct object reference vulnerability in the email... Moderate Unreviewed
CVE-2026-109963 was published Oct 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database