Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,596
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

36,575 advisories

Loading
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks Critical
CVE-2026-77459 was published for github.com/argoproj/argo-cd/v2 (Go) Oct 15, 2026
RealFakeAccount Credited to RealFakeAccount, AdamKorcz, 0xshylines, thevilledev, HenriWilliams, cherez0ff, and zwindler AdamKorcz AdamKorcz
0xshylines 0xshylines thevilledev thevilledev HenriWilliams HenriWilliams cherez0ff cherez0ff zwindler zwindler
Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service Critical
CVE-2026-102748 was published for github.com/dgraph-io/dgraph/v25 (Go) Oct 15, 2026
0d000721999 Credited to 0d000721999
Vitess vttablet /twopcz reflected XSS Critical
CVE-2026-104252 was published for vitess.io/vitess (Go) Oct 15, 2026
xylove21 Credited to xylove21
An unauthenticated remote attacker can bypass authentication and gain full access to... Critical Unreviewed
CVE-2026-84731 was published Oct 15, 2026
Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune... Critical Unreviewed
CVE-2026-110812 was published Oct 15, 2026
A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an... Critical Unreviewed
CVE-2026-110958 was published Oct 15, 2026
A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote... Critical Unreviewed
CVE-2026-105474 was published Oct 15, 2026
A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604. The affected... Critical Unreviewed
CVE-2026-110957 was published Oct 15, 2026
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2026-109688 was published Oct 15, 2026
Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link... Critical Unreviewed
CVE-2026-109686 was published Oct 15, 2026
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2026-109698 was published Oct 15, 2026
Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf... Critical Unreviewed
CVE-2026-109892 was published Oct 15, 2026
An OS command injection vulnerability has been reported to affect HybridDesk Station. If... Critical Unreviewed
CVE-2026-47786 was published Oct 15, 2026
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2026-108497 was published Oct 15, 2026
Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows... Critical Unreviewed
CVE-2026-109694 was published Oct 15, 2026
An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a... Critical Unreviewed
CVE-2026-50612 was published Oct 15, 2026
A path traversal vulnerability has been reported to affect Qsirch. If exploited, the... Critical Unreviewed
CVE-2026-50619 was published Oct 15, 2026
A missing authentication for critical function vulnerability has been reported to affect sMedio... Critical Unreviewed
CVE-2026-34006 was published Oct 15, 2026
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric... Critical Unreviewed
CVE-2026-16436 was published Oct 15, 2026
Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3... Critical Unreviewed
CVE-2026-16438 was published Oct 15, 2026
Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a... Critical Unreviewed
CVE-2026-101287 was published Oct 15, 2026
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... Critical Unreviewed
CVE-2026-102469 was published Oct 15, 2026
The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of... Critical Unreviewed
CVE-2026-109145 was published Oct 15, 2026
In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain... Critical Unreviewed
CVE-2026-93483 was published Oct 15, 2026
The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress... Critical Unreviewed
CVE-2026-108587 was published Oct 15, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database