Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
117
GitHub Actions
55
Go
4,836
Maven
5,000+
npm
5,000+
NuGet
1,126
pip
5,000+
Pub
13
RubyGems
1,157
Rust
1,577
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20

173,014 advisories

Loading
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3... Moderate Unreviewed
CVE-2026-92529 was published Sep 24, 2026
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19... Moderate Unreviewed
CVE-2026-92874 was published Sep 24, 2026
A vulnerability has been found in pmTicket Project-Management-Software up to... Moderate Unreviewed
CVE-2026-96751 was published Sep 24, 2026
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.7, 19... Moderate Unreviewed
CVE-2026-92530 was published Sep 24, 2026
A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the... Moderate Unreviewed
CVE-2026-96762 was published Sep 24, 2026
A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the... Moderate Unreviewed
CVE-2026-96602 was published Sep 24, 2026
A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function... Moderate Unreviewed
CVE-2026-96601 was published Sep 24, 2026
A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the... Moderate Unreviewed
CVE-2026-96604 was published Sep 24, 2026
A vulnerability has been found in Abdurrab5 online-makeup-store. Affected is the function... Moderate Unreviewed
CVE-2026-96603 was published Sep 24, 2026
A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects... Moderate Unreviewed
CVE-2026-96606 was published Sep 24, 2026
plone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length Moderate
GHSA-8pcw-h6w9-h46g was published for plone.app.contenttypes (pip) Sep 23, 2026
viliald Credited to viliald
plone.app.dexterity has a Denial of Service due to excessive title or description length Moderate
CVE-2026-57576 was published for plone.app.dexterity (pip) Sep 23, 2026
viliald Credited to viliald
A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the... Moderate Unreviewed
CVE-2026-96556 was published Sep 23, 2026
IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to traverse directories on the... Moderate Unreviewed
CVE-2026-6925 was published Sep 23, 2026
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows... Moderate Unreviewed
CVE-2026-6718 was published Sep 23, 2026
A flaw was found in the automation-controller instance install-bundle endpoint.... Moderate Unreviewed
CVE-2026-84716 was published Sep 23, 2026
An argument-injection flaw was found in the Ansible Automation Platform automation-controller... Moderate Unreviewed
CVE-2026-84724 was published Sep 23, 2026
A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated... Moderate Unreviewed
CVE-2026-84717 was published Sep 23, 2026
A flaw was found in the Ansible Automation Platform automation-controller. In the shipped... Moderate Unreviewed
CVE-2026-84718 was published Sep 23, 2026
A flaw was found in the Ansible Automation Platform automation-controller. The WorkflowJobNode... Moderate Unreviewed
CVE-2026-84720 was published Sep 23, 2026
A server-side request forgery flaw was found in the Ansible Automation Platform automation... Moderate Unreviewed
CVE-2026-84721 was published Sep 23, 2026
A flaw was found in the automation-controller API. The unauthenticated health... Moderate Unreviewed
CVE-2026-84712 was published Sep 23, 2026
A flaw was found in the automation-controller notification subsystem. Although... Moderate Unreviewed
CVE-2026-84713 was published Sep 23, 2026
An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted... Moderate Unreviewed
CVE-2026-96545 was published Sep 23, 2026
Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Request A... Moderate Unreviewed
CVE-2026-95602 was published Sep 23, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database