Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,455
Maven
5,000+
npm
5,000+
NuGet
1,090
pip
5,000+
Pub
13
RubyGems
1,135
Rust
1,509
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

223 advisories

Loading
An improper access control vulnerability in Koollab LMS allowed an unauthenticated attacker to... Low Unreviewed
CVE-2026-63235 was published Jul 29, 2026
An improper access control vulnerability in Koollab LMS allowed an unauthenticated attacker to... Low Unreviewed
CVE-2026-63236 was published Jul 29, 2026
ImageMagick: Policy Bypass in script operation due to missing checks Low
GHSA-vghg-5jrg-2398 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
ImageMagick: Policy Bypass possible with matrix-backed operations Low
GHSA-rvhp-75f6-9jqh was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`) Low
GHSA-whvh-wf3x-g77j was published for jupyterlab (pip) Jul 22, 2026
de3erve-hunter Credited to de3erve-hunter, MUFFANUJ, and krassowski MUFFANUJ MUFFANUJ
krassowski krassowski
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:... Low Unreviewed
CVE-2026-61096 was published Jul 22, 2026
Vulnerability in the PeopleSoft Enterprise FIN Engineering Argentina product of Oracle PeopleSoft... Low Unreviewed
CVE-2026-61071 was published Jul 22, 2026
Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component:... Low Unreviewed
CVE-2026-61047 was published Jul 22, 2026
Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Norway... Low Unreviewed
CVE-2026-61036 was published Jul 22, 2026
Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite ... Low Unreviewed
CVE-2026-60929 was published Jul 22, 2026
Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component:... Low Unreviewed
CVE-2026-60937 was published Jul 22, 2026
Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component... Low Unreviewed
CVE-2026-60804 was published Jul 22, 2026
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:... Low Unreviewed
CVE-2026-60628 was published Jul 22, 2026
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)... Low Unreviewed
CVE-2026-60353 was published Jul 22, 2026
Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component:... Low Unreviewed
CVE-2026-60338 was published Jul 22, 2026
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:... Low Unreviewed
CVE-2026-60346 was published Jul 22, 2026
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:... Low Unreviewed
CVE-2026-60347 was published Jul 22, 2026
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:... Low Unreviewed
CVE-2026-60190 was published Jul 22, 2026
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow... Low Unreviewed
CVE-2026-60144 was published Jul 22, 2026
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... Low Unreviewed
CVE-2026-47059 was published Jul 22, 2026
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ... Low Unreviewed
CVE-2026-47055 was published Jul 22, 2026
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Redwood UI). ... Low Unreviewed
CVE-2026-47032 was published Jul 22, 2026
Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is... Low Unreviewed
CVE-2026-47034 was published Jul 22, 2026
Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is... Low Unreviewed
CVE-2026-47030 was published Jul 22, 2026
Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is... Low Unreviewed
CVE-2026-47035 was published Jul 22, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database