Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

353,428 advisories

Loading
The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce... Unknown Unreviewed
CVE-2026-110069 was published Oct 18, 2026
The Salon Booking System WordPress plugin before 10.31.11 does not restrict one of its REST API... Unknown Unreviewed
CVE-2026-110035 was published Oct 18, 2026
The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied... Unknown Unreviewed
CVE-2026-110033 was published Oct 18, 2026
The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its... Unknown Unreviewed
CVE-2026-110976 was published Oct 18, 2026
The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is... Unknown Unreviewed
CVE-2026-110070 was published Oct 18, 2026
The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro... Unknown Unreviewed
CVE-2026-96534 was published Oct 18, 2026
The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI... Unknown Unreviewed
CVE-2026-111041 was published Oct 18, 2026
The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform... Unknown Unreviewed
CVE-2026-87844 was published Oct 18, 2026
The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category... Unknown Unreviewed
CVE-2026-110981 was published Oct 18, 2026
A vulnerability was determined in dext34-morgan Books4Cash up to... Low Unreviewed
CVE-2026-111877 was published Oct 18, 2026
A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.0. Impacted is an... Low Unreviewed
CVE-2026-111942 was published Oct 18, 2026
The Otter Blocks WordPress plugin before 3.2.3 does not validate that a user-supplied return URL... Unknown Unreviewed
CVE-2026-109937 was published Oct 18, 2026
The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account... Unknown Unreviewed
CVE-2026-110032 was published Oct 18, 2026
The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its... Unknown Unreviewed
CVE-2026-110031 was published Oct 18, 2026
The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities... Unknown Unreviewed
CVE-2026-110026 was published Oct 18, 2026
A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this... Low Unreviewed
CVE-2026-111875 was published Oct 18, 2026
A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is... Low Unreviewed
CVE-2026-111876 was published Oct 18, 2026
A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file... Low Unreviewed
CVE-2026-111874 was published Oct 18, 2026
A weakness has been identified in itsmeravitejak Online-Examination-System up to... Moderate Unreviewed
CVE-2026-111871 was published Oct 18, 2026
A security flaw has been discovered in itsmeravitejak Online-Examination-System up to... Moderate Unreviewed
CVE-2026-111870 was published Oct 18, 2026
A vulnerability was detected in itsmeravitejak Online-Examination-System up to... Moderate Unreviewed
CVE-2026-111873 was published Oct 18, 2026
A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to... Moderate Unreviewed
CVE-2026-111872 was published Oct 18, 2026
A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of... Moderate Unreviewed
CVE-2026-111869 was published Oct 18, 2026
ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity,... Moderate Unreviewed
CVE-2026-111997 was published Oct 18, 2026
A vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the... Low Unreviewed
CVE-2026-111868 was published Oct 18, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database