Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
101
GitHub Actions
54
Go
4,295
Maven
5,000+
npm
5,000+
NuGet
1,029
pip
5,000+
Pub
13
RubyGems
1,107
Rust
1,492
Swift
61
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

313,197 advisories

Loading
Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker... High Unreviewed
CVE-2026-58596 was published Jul 12, 2026
A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this... Low Unreviewed
CVE-2026-15501 was published Jul 12, 2026
A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function _rewardPurchase... Moderate Unreviewed
CVE-2026-15502 was published Jul 12, 2026
Capgo before 12.128.2 allows email address changes without requiring current password re... High Unreviewed
CVE-2026-56308 was published Jul 12, 2026
filebrowser versions before 2.63.17 fail to normalize paths before querying the share index in... Low Unreviewed
CVE-2026-61874 was published Jul 12, 2026
Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT... Critical Unreviewed
CVE-2026-56271 was published Jul 12, 2026
luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated... High Unreviewed
CVE-2026-61875 was published Jul 12, 2026
Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated ... Moderate Unreviewed
CVE-2026-56336 was published Jul 12, 2026
Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/admin_stats... Moderate Unreviewed
CVE-2026-56281 was published Jul 12, 2026
Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO... High Unreviewed
CVE-2026-56313 was published Jul 12, 2026
OpenWrt luci-app-samba4 read ACL grants file.exec permission on /usr/sbin/smbd, allowing... High Unreviewed
CVE-2026-59260 was published Jul 12, 2026
LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables,... Critical Unreviewed
CVE-2026-61876 was published Jul 12, 2026
Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST... High Unreviewed
CVE-2026-56238 was published Jul 12, 2026
Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server... High Unreviewed
CVE-2026-56259 was published Jul 12, 2026
Capgo before 12.128.2 contains a privilege escalation vulnerability where demoted super_admin... High Unreviewed
CVE-2026-56241 was published Jul 12, 2026
A vulnerability was identified in sergomanov SmartHomeAdatum up to... Moderate Unreviewed
CVE-2026-15498 was published Jul 12, 2026
A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2. Affected is the function... Low Unreviewed
CVE-2026-15499 was published Jul 12, 2026
A weakness has been identified in AstrBotDevs AstrBot up to 4.25.2. Affected by this... Low Unreviewed
CVE-2026-15500 was published Jul 12, 2026
Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's ... High Unreviewed
CVE-2026-56260 was published Jul 12, 2026
Capgo before 12.128.2 contains a scope isolation vulnerability in the POST /webhooks/test... Moderate Unreviewed
CVE-2026-56252 was published Jul 12, 2026
A vulnerability was detected in Akpali9 Attendance-Management-System up to... Moderate Unreviewed
CVE-2026-15493 was published Jul 12, 2026
A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to... Moderate Unreviewed
CVE-2026-15491 was published Jul 12, 2026
A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the... Low Unreviewed
CVE-2026-15496 was published Jul 12, 2026
A security flaw has been discovered in RafyMrX TOKO-ONLINE-ROTI up to... Moderate Unreviewed
CVE-2026-15490 was published Jul 12, 2026
A security vulnerability has been detected in igweze wizgrade up to... Low Unreviewed
CVE-2026-15492 was published Jul 12, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database