Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,596
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

5,957 advisories

Loading
A weakness has been identified in Ultralytics FastSAM up to... Moderate Unreviewed
CVE-2026-111237 was published Oct 16, 2026
The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4... Moderate Unreviewed
CVE-2026-100159 was published Oct 16, 2026
A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected... Low Unreviewed
CVE-2026-111212 was published Oct 16, 2026
Improper Control of Generation of Code ('Code Injection') vulnerability in WPMU DEV Broken Link... Moderate Unreviewed
CVE-2026-102389 was published Oct 15, 2026
The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all... Moderate Unreviewed
CVE-2026-86803 was published Oct 15, 2026
A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN... High Unreviewed
CVE-2026-0322 was published Oct 14, 2026
Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Salevo woo... High Unreviewed
CVE-2026-103081 was published Oct 14, 2026
Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp... Moderate Unreviewed
CVE-2026-108151 was published Oct 14, 2026
Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email... High Unreviewed
CVE-2026-103358 was published Oct 14, 2026
The affiliate-toolkit WordPress plugin before 3.9.1 does not prevent a low-privileged user from... High Unreviewed
CVE-2026-86787 was published Oct 14, 2026
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability.... High Unreviewed
CVE-2026-110444 was published Oct 14, 2026
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability.... High Unreviewed
CVE-2026-110445 was published Oct 14, 2026
The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode... Critical Unreviewed
CVE-2026-92097 was published Oct 14, 2026
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection')... Critical Unreviewed
CVE-2026-106624 was published Oct 13, 2026
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection')... Critical Unreviewed
CVE-2026-106621 was published Oct 13, 2026
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection')... Critical Unreviewed
CVE-2026-105903 was published Oct 13, 2026
Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped,... Critical Unreviewed
CVE-2026-63146 was published Oct 13, 2026
Improper control of generation of code ('code injection') in Windows Assigned Access allows an... High Unreviewed
CVE-2026-96220 was published Oct 13, 2026
Improper control of generation of code ('code injection') in Windows Performance Monitor allows... High Unreviewed
CVE-2026-85359 was published Oct 13, 2026
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS)... High Unreviewed
CVE-2026-83759 was published Oct 13, 2026
Improper control of generation of code ('code injection') in Visual Studio Tools for Applications... High Unreviewed
CVE-2026-103572 was published Oct 13, 2026
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows... High Unreviewed
CVE-2026-102863 was published Oct 13, 2026
Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability High
CVE-2026-102870 was published for Microsoft.AspNetCore.Components.WebAssembly.Server (NuGet) Oct 13, 2026
An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3... Critical Unreviewed
CVE-2026-78802 was published Oct 13, 2026
An issue in MongoDB Server's aggregation framework can cause certain constant values to be... Moderate Unreviewed
CVE-2026-103965 was published Oct 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database