Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,183
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

350,040 advisories

Loading
A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the... High Unreviewed
CVE-2026-86567 was published Oct 14, 2026
A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their... Moderate Unreviewed
CVE-2026-110777 was published Oct 14, 2026
Missing Authorization vulnerability in Skydropx Skydropx skydropx allows Exploiting Incorrectly... High Unreviewed
CVE-2026-108480 was published Oct 14, 2026
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate... High Unreviewed
CVE-2026-88164 was published Oct 14, 2026
ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios... High Unreviewed
CVE-2026-79957 was published Oct 14, 2026
A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an... Moderate Unreviewed
CVE-2026-86847 was published Oct 14, 2026
A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy... Moderate Unreviewed
CVE-2026-86566 was published Oct 14, 2026
A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue... Moderate Unreviewed
CVE-2026-86856 was published Oct 14, 2026
A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session... Moderate Unreviewed
CVE-2026-86845 was published Oct 14, 2026
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Limited Arbitrary File... High Unreviewed
CVE-2026-86461 was published Oct 14, 2026
A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches... High Unreviewed
CVE-2026-86848 was published Oct 14, 2026
A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor... Moderate Unreviewed
CVE-2026-86846 was published Oct 14, 2026
A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and... Moderate Unreviewed
CVE-2026-86849 was published Oct 14, 2026
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... High Unreviewed
CVE-2026-108483 was published Oct 14, 2026
An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to... High Unreviewed
CVE-2026-107349 was published Oct 14, 2026
Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the... High Unreviewed
CVE-2026-107350 was published Oct 14, 2026
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... High Unreviewed
CVE-2026-108484 was published Oct 14, 2026
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... High Unreviewed
CVE-2026-105066 was published Oct 14, 2026
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks... High Unreviewed
CVE-2026-101975 was published Oct 14, 2026
Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp... Moderate Unreviewed
CVE-2026-108151 was published Oct 14, 2026
Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through... Moderate Unreviewed
CVE-2026-107348 was published Oct 14, 2026
Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Salevo woo... High Unreviewed
CVE-2026-103081 was published Oct 14, 2026
A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper... High Unreviewed
CVE-2026-101961 was published Oct 14, 2026
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper... High Unreviewed
CVE-2026-101981 was published Oct 14, 2026
An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks... High Unreviewed
CVE-2026-101976 was published Oct 14, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database