Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
117
GitHub Actions
55
Go
4,836
Maven
5,000+
npm
5,000+
NuGet
1,126
pip
5,000+
Pub
13
RubyGems
1,157
Rust
1,577
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20

3,847 advisories

Loading
Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits... High Unreviewed
CVE-2026-82370 was published Sep 24, 2026
A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element... Low Unreviewed
CVE-2026-95660 was published Sep 22, 2026
NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an... High Unreviewed
CVE-2026-65111 was published Sep 22, 2026
A security flaw has been discovered in OctoPrint 1.0.0. Affected by this issue is the function... Low Unreviewed
CVE-2026-94490 was published Sep 22, 2026
A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function... High Unreviewed
CVE-2026-93958 was published Sep 20, 2026
A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function... Moderate Unreviewed
CVE-2026-93533 was published Sep 18, 2026
NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php. High Unreviewed
CVE-2026-88622 was published Sep 18, 2026
Improper neutralization of special elements used in a command ('command injection') in Microsoft... High Unreviewed
CVE-2026-78501 was published Sep 18, 2026
Improper neutralization of special elements used in a command ('command injection') in Microsoft... Moderate Unreviewed
CVE-2026-55946 was published Sep 18, 2026
Improper neutralization of special elements used in a command ('command injection') in M365... Critical Unreviewed
CVE-2026-85885 was published Sep 18, 2026
A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the... Low Unreviewed
CVE-2026-92993 was published Sep 17, 2026
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary... Critical Unreviewed
CVE-2026-20176 was published Sep 16, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus... Critical Unreviewed
CVE-2026-20325 was published Sep 16, 2026
A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue is some... High Unreviewed
CVE-2026-92398 was published Sep 16, 2026
A vulnerability has been found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this... High Unreviewed
CVE-2026-92397 was published Sep 16, 2026
On affected platforms running Arista EOS with gRPC Network Security Interface (gNSI) Credentialz... High Unreviewed
CVE-2026-73454 was published Sep 16, 2026
A command injection vulnerability exists in the web-based management interface of HPE Networking... Moderate Unreviewed
CVE-2026-76698 was published Sep 15, 2026
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN... Critical Unreviewed
CVE-2026-76675 was published Sep 15, 2026
GitLab has remediated an issue in GitLab EE affecting all versions from 12.3 to 19.1.8, 19.2... High Unreviewed
CVE-2026-88765 was published Sep 15, 2026
A vulnerability has been found in TOTOLINK X5000R 9.1.0cu.2089_B20211224. The impacted element is... Low Unreviewed
CVE-2026-91853 was published Sep 15, 2026
A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown... High Unreviewed
CVE-2026-90847 was published Sep 15, 2026
A security vulnerability has been detected in SabyasachiRana WebMap up to... Moderate Unreviewed
CVE-2026-90843 was published Sep 15, 2026
A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this... Low Unreviewed
CVE-2026-90788 was published Sep 14, 2026
A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of... Low Unreviewed
CVE-2026-90705 was published Sep 14, 2026
A vulnerability was identified in D-Link DWR-M921 1.1.52. This impacts the function formWsc of... Low Unreviewed
CVE-2026-90706 was published Sep 14, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database