Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,583
Rust
21

13,696 advisories

Loading
CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14... High Unreviewed
CVE-2026-116768 was published Nov 2, 2026
Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Input... Moderate Unreviewed
CVE-2026-86365 was published Nov 2, 2026
In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there... High Unreviewed
CVE-2026-55262 was published Nov 2, 2026
In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission... High Unreviewed
CVE-2026-28597 was published Nov 2, 2026
A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module. The... High Unreviewed
CVE-2026-106804 was published Nov 2, 2026
Out-of-bounds read vulnerability in Apache Arrow Rust (`arrow` crate), from version 33.0.0... Unknown Unreviewed
CVE-2026-111959 was published Nov 2, 2026
A vulnerability was determined in jxxghp MoviePilot up to 3.1.2. This vulnerability affects the... Low Unreviewed
CVE-2026-120320 was published Nov 2, 2026
A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability... Low Unreviewed
CVE-2026-120236 was published Nov 1, 2026
MariaDB Connector/J: XA recover() trusted server-supplied gtrid and bqual lengths Low
CVE-2026-119280 was published for org.mariadb.jdbc:mariadb-java-client (Maven) Oct 30, 2026
fg0x0 Credited to fg0x0
MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files Moderate
CVE-2026-119210 was published for org.mariadb.jdbc:mariadb-java-client (Maven) Oct 30, 2026
buxu Credited to buxu
AdminNeo has Cookie Attribute Injection via Unsanitized X-Forwarded-Prefix in Set-Cookie Headers High
CVE-2026-96631 was published for adminneo-org/adminneo (Composer) Oct 30, 2026
retkoussa Credited to retkoussa and vrana vrana vrana
AdminNeo: version-cache array injection causes persistent denial of service High
CVE-2026-59978 was published for adminneo-org/adminneo (Composer) Oct 30, 2026
JoyGhoshs Credited to JoyGhoshs and vrana vrana vrana
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation... High Unreviewed
CVE-2026-91917 was published Oct 30, 2026
Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker... High Unreviewed
CVE-2026-119262 was published Oct 30, 2026
Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a... High Unreviewed
CVE-2026-119270 was published Oct 30, 2026
Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote... Critical Unreviewed
CVE-2026-119261 was published Oct 30, 2026
A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared... High Unreviewed
CVE-2026-90869 was published Oct 29, 2026
Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 does not verify that set... Low Unreviewed
CVE-2026-119130 was published Oct 29, 2026
Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence Low
GHSA-c33x-vcv4-vg3g was published for @cedar-policy/cedar-wasm (npm) Oct 29, 2026
john-h-kastner-aws Credited to john-h-kastner-aws and DenizParlak DenizParlak DenizParlak
Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to... High Unreviewed
CVE-2026-21157 was published Oct 29, 2026
A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the... Moderate Unreviewed
CVE-2026-118537 was published Oct 29, 2026
vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE High
CVE-2026-115915 was published for vllm (pip) Oct 28, 2026
LittlehamsterXu Credited to LittlehamsterXu and jperezdealgaba jperezdealgaba jperezdealgaba
zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE Critical
CVE-2026-115905 was published for zip (Rust) Oct 28, 2026
ByGh00st Credited to ByGh00st and Pr0methean Pr0methean Pr0methean
A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side... Moderate Unreviewed
CVE-2026-88858 was published Oct 28, 2026
A user with query access to an Azure Monitor data source in Grafana can cause server-side... High Unreviewed
CVE-2026-88967 was published Oct 28, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database