Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,450
Maven
5,000+
npm
5,000+
NuGet
1,090
pip
5,000+
Pub
13
RubyGems
1,134
Rust
1,509
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

2,416 advisories

Loading
IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM... Moderate Unreviewed
CVE-2026-7362 was published Jul 28, 2026
The FluentCart A New Era of eCommerce WordPress plugin before 1.4.0 does not verify that a... Moderate Unreviewed
CVE-2026-14926 was published Jul 28, 2026
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8,... Moderate Unreviewed
CVE-2026-64723 was published Jul 27, 2026
This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and... Moderate Unreviewed
CVE-2026-64732 was published Jul 27, 2026
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS... Moderate Unreviewed
CVE-2026-43819 was published Jul 27, 2026
An access issue was addressed with improved access restrictions. This issue is fixed in Safari 26... Moderate Unreviewed
CVE-2026-43821 was published Jul 27, 2026
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS... Moderate Unreviewed
CVE-2026-43763 was published Jul 27, 2026
An access issue was addressed with improved access restrictions. This issue is fixed in macOS... Moderate Unreviewed
CVE-2026-43760 was published Jul 27, 2026
In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows... Moderate Unreviewed
CVE-2026-12702 was published Jul 24, 2026
The ProfileGrid WordPress plugin before 5.9.9.7 does not verify PayPal IPN notifications before... Moderate Unreviewed
CVE-2026-12688 was published Jul 24, 2026
Administrator URL purges did not consistently require a valid token and cache-management permission. Moderate Unreviewed
CVE-2026-64871 was published Jul 23, 2026
Netty: Security Control Bypass via CORS Short-Circuit Failure Moderate
CVE-2026-56746 was published for io.netty:netty-codec-http (Maven) Jul 22, 2026
violetagg Credited to violetagg
User tags, filters and conditions allowed access to insufficiently restricted user fields.... Moderate Unreviewed
CVE-2026-64794 was published Jul 22, 2026
The Timetics WordPress plugin before 1.0.57 does not enforce a pending or unpaid status for new... Moderate Unreviewed
CVE-2026-14322 was published Jul 22, 2026
Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal... Moderate Unreviewed
CVE-2026-62562 was published Jul 22, 2026
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self... Moderate Unreviewed
CVE-2026-62542 was published Jul 22, 2026
Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component:... Moderate Unreviewed
CVE-2026-62503 was published Jul 22, 2026
Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component:... Moderate Unreviewed
CVE-2026-62505 was published Jul 22, 2026
Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component:... Moderate Unreviewed
CVE-2026-62507 was published Jul 22, 2026
Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component:... Moderate Unreviewed
CVE-2026-62489 was published Jul 22, 2026
Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component:... Moderate Unreviewed
CVE-2026-62486 was published Jul 22, 2026
Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component:... Moderate Unreviewed
CVE-2026-62488 was published Jul 22, 2026
Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component:... Moderate Unreviewed
CVE-2026-62484 was published Jul 22, 2026
Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal... Moderate Unreviewed
CVE-2026-62465 was published Jul 22, 2026
Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component:... Moderate Unreviewed
CVE-2026-62483 was published Jul 22, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database