Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,583
Rust
21

47,090 advisories

Loading
A vulnerability was identified in Welcart e-Commerce Plugin up to 2.12.6 on WordPress. This... Low Unreviewed
CVE-2026-120597 was published Nov 3, 2026
Munshi (by Petpooja) before 2026-07-13 contained a stored cross-site scripting vulnerability that... Moderate Unreviewed
CVE-2026-119735 was published Nov 2, 2026
An Otter Wiki before 2.26.2 contains a stored cross-site scripting vulnerability in... Moderate Unreviewed
CVE-2026-120500 was published Nov 2, 2026
Wing FTP Server before 8.2.6 contains a stored cross-site scripting vulnerability that allows... Moderate Unreviewed
CVE-2026-120491 was published Nov 2, 2026
LaraDashboard before 1.4.9 contains a stored cross-site scripting vulnerability that allows... Moderate Unreviewed
CVE-2026-120488 was published Nov 2, 2026
GoFound through 1.4.1 contains a stored cross-site scripting vulnerability that allows... Moderate Unreviewed
CVE-2026-120443 was published Nov 2, 2026
PandaWiki 3.65.0 through 3.87.5 contains a stored cross-site scripting vulnerability that allows... Moderate Unreviewed
CVE-2026-120428 was published Nov 2, 2026
Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in... High Unreviewed
CVE-2026-105602 was published Nov 2, 2026
Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix... High Unreviewed
CVE-2026-103419 was published Nov 2, 2026
Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5 Moderate Unreviewed
CVE-2026-105601 was published Nov 2, 2026
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Input... Moderate Unreviewed
CVE-2026-91907 was published Nov 2, 2026
The Publisher portal fails to enforce proper validation on uploaded SVG files, allowing users... Moderate Unreviewed
CVE-2025-12544 was published Nov 2, 2026
The user search function within the management console fails to properly encode user-supplied... Moderate Unreviewed
CVE-2024-7075 was published Nov 2, 2026
A flaw has been found in mathurvishal CloudClassroom-PHP-Project. The impacted element is an... Low Unreviewed
CVE-2026-120343 was published Nov 2, 2026
A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project. This... Low Unreviewed
CVE-2026-120339 was published Nov 2, 2026
Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket... High Unreviewed
CVE-2026-84231 was published Nov 2, 2026
Improper neutralization of input during web page generation in Apache Wicket. Apache Wicket... High Unreviewed
CVE-2026-95863 was published Nov 2, 2026
Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket... High Unreviewed
CVE-2026-83539 was published Nov 2, 2026
Apache Wicket reads texts from the application's resource bundles — a localized label, a css... High Unreviewed
CVE-2026-111089 was published Nov 2, 2026
Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket... High Unreviewed
CVE-2026-82956 was published Nov 2, 2026
A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP... Low Unreviewed
CVE-2026-120242 was published Nov 1, 2026
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... High Unreviewed
CVE-2026-66570 was published Nov 1, 2026
A flaw has been found in Typemill up to 2.26.0. The impacted element is the function... Low Unreviewed
CVE-2026-120218 was published Nov 1, 2026
The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode... Moderate Unreviewed
CVE-2026-113482 was published Nov 1, 2026
Thelia before 3.1.1 contains a stored cross-site scripting vulnerability that allows... Moderate Unreviewed
CVE-2026-120248 was published Nov 1, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database