Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,596
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

2,573 advisories

Loading
The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update... High Unreviewed
CVE-2026-105040 was published Oct 15, 2026
La Suite Docs through 6.0.0 contains an authorization bypass vulnerability that allows... Low Unreviewed
CVE-2026-111169 was published Oct 15, 2026
temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted payloads to the namespace they were... Moderate Unreviewed
CVE-2026-108126 was published Oct 15, 2026
Authorization Bypass Through User-Controlled Key vulnerability in ELEXtensions ELEX WooCommerce... Moderate Unreviewed
CVE-2026-103083 was published Oct 15, 2026
Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule... Moderate Unreviewed
CVE-2026-110381 was published Oct 15, 2026
Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking... High Unreviewed
CVE-2026-107416 was published Oct 15, 2026
An authorization bypass through user-controlled key vulnerability has been reported to affect... High Unreviewed
CVE-2026-44084 was published Oct 15, 2026
The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2026-108092 was published Oct 15, 2026
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create... Moderate Unreviewed
CVE-2026-110851 was published Oct 15, 2026
n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated... High Unreviewed
CVE-2026-110853 was published Oct 15, 2026
n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint,... Moderate Unreviewed
CVE-2026-110841 was published Oct 15, 2026
In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required... High Unreviewed
CVE-2026-102298 was published Oct 15, 2026
Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that... High Unreviewed
CVE-2026-110775 was published Oct 14, 2026
Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that... Moderate Unreviewed
CVE-2026-110774 was published Oct 14, 2026
Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated... Moderate Unreviewed
CVE-2026-110771 was published Oct 14, 2026
lamp-boot 4.16.0-java17 through 4.21.2-java17 contains an insecure direct object reference... Moderate Unreviewed
CVE-2026-110763 was published Oct 14, 2026
AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the... Moderate Unreviewed
CVE-2026-110764 was published Oct 14, 2026
ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios... High Unreviewed
CVE-2026-79957 was published Oct 14, 2026
Formbricks before 4.9.0 contains an authorization bypass vulnerability in server actions like... Moderate Unreviewed
CVE-2026-110620 was published Oct 14, 2026
youlai-mall through commit 9f62de8 contains a missing authorization vulnerability that allows... High Unreviewed
CVE-2026-110613 was published Oct 14, 2026
REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2... Moderate Unreviewed
CVE-2026-110611 was published Oct 14, 2026
BizSpring Shop through commit cf22d39daaf1 contains an insecure direct object reference... Moderate Unreviewed
CVE-2026-110608 was published Oct 14, 2026
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for... High Unreviewed
CVE-2026-103366 was published Oct 14, 2026
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.14 does not verify... Moderate Unreviewed
CVE-2026-88927 was published Oct 14, 2026
The Sifalo Pay WordPress plugin before 2.5.3 does not verify that a payment transaction... Moderate Unreviewed
CVE-2026-94261 was published Oct 14, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database