Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,455
Maven
5,000+
npm
5,000+
NuGet
1,090
pip
5,000+
Pub
13
RubyGems
1,135
Rust
1,509
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,823 advisories

Loading
A vulnerability was determined in 1Panel-dev CordysCRM up to 1.4.1. Impacted is the function... Low Unreviewed
CVE-2026-16223 was published Jul 19, 2026
A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function... Low Unreviewed
CVE-2026-16196 was published Jul 19, 2026
A vulnerability was determined in zhayujie CowAgent up to 2.1.1. This affects the function... Low Unreviewed
CVE-2026-16194 was published Jul 19, 2026
A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This impacts the function... Moderate Unreviewed
CVE-2026-16128 was published Jul 18, 2026
A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This... Low Unreviewed
CVE-2026-16124 was published Jul 18, 2026
A vulnerability was identified in zevorn rt-claw up to 0.2.0. This affects the function... Moderate Unreviewed
CVE-2026-16127 was published Jul 18, 2026
A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the function... Moderate Unreviewed
CVE-2026-16125 was published Jul 18, 2026
SurrealDB before 2.2.2 fails to validate HTTP redirects in http functions, allowing authenticated... Moderate Unreviewed
CVE-2025-71398 was published Jul 18, 2026
A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function... Moderate Unreviewed
CVE-2026-16084 was published Jul 18, 2026
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery ... High Unreviewed
CVE-2026-7754 was published Jul 17, 2026
A vulnerability was detected in AstrBotDevs AstrBot up to 4.25.2. This affects the function... Low Unreviewed
CVE-2026-16074 was published Jul 17, 2026
Xenforo 2.3.8 is vulnerable to SSRF. Attackers that have administrator privileges or are able to... High Unreviewed
CVE-2026-51833 was published Jul 17, 2026
Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows... Moderate Unreviewed
CVE-2026-63096 was published Jul 17, 2026
A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function... Moderate Unreviewed
CVE-2026-16016 was published Jul 17, 2026
Grav before 2.0.4 fails to restrict cURL protocols in webhook dispatch, allowing authenticated... High Unreviewed
CVE-2026-62234 was published Jul 17, 2026
OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser... Moderate Unreviewed
CVE-2026-62226 was published Jul 17, 2026
OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in... Moderate Unreviewed
CVE-2026-62227 was published Jul 17, 2026
OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A... Low Unreviewed
CVE-2026-62216 was published Jul 17, 2026
OpenClaw versions before 2026.6.6 contain a network policy bypass vulnerability in the sandbox... Moderate Unreviewed
CVE-2026-62201 was published Jul 17, 2026
text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF)... Moderate Unreviewed
CVE-2026-63086 was published Jul 16, 2026
stoatchat before 0.13.5 contains an unauthenticated server-side request forgery vulnerability in... Critical Unreviewed
CVE-2026-63306 was published Jul 16, 2026
PraisonAI before 1.6.78 contains a server-side request forgery vulnerability in the web_crawl... High Unreviewed
CVE-2026-61430 was published Jul 15, 2026
CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that... High Unreviewed
CVE-2026-48290 was published Jul 15, 2026
A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the... Low Unreviewed
CVE-2026-15750 was published Jul 15, 2026
Simple Machines Forum 2.1 prior to commit 4bf35cf and 3.0 prior to commit b4d23df contains a... Moderate Unreviewed
CVE-2026-61520 was published Jul 14, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database