Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,455
Maven
5,000+
npm
5,000+
NuGet
1,090
pip
5,000+
Pub
13
RubyGems
1,135
Rust
1,509
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

1,453 advisories

Loading
skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source Moderate
GHSA-6xx4-9wp6-65p7 was published for skilo (Rust) Jul 28, 2026
tonghuaroot Credited to tonghuaroot
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia... Moderate Unreviewed
CVE-2026-43765 was published Jul 27, 2026
A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the... Low Unreviewed
CVE-2026-17459 was published Jul 26, 2026
Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution High
CVE-2026-55607 was published for @anthropic-ai/claude-code (npm) Jul 24, 2026
Improper Link Resolution (CWE-59) in `/usr/bin/larm_starter` in Loytec L-INX, L-GATE, L-ROC, L... Critical Unreviewed
CVE-2026-12503 was published Jul 24, 2026
ImageMagick: Policy Bypass in script operation due to missing checks Low
GHSA-vghg-5jrg-2398 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check Low
GHSA-v3j6-27vc-7pw2 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219 Moderate
GHSA-56m6-8q75-f2rw was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
A flaw was found in systemd-tmpfiles. When processing a tmpfiles.d configuration entry that... Moderate Unreviewed
CVE-2026-16552 was published Jul 22, 2026
Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and... Moderate Unreviewed
CVE-2026-64613 was published Jul 21, 2026
Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and... Low Unreviewed
CVE-2026-64617 was published Jul 21, 2026
Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and... Low Unreviewed
CVE-2026-64615 was published Jul 21, 2026
Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and... Unknown Unreviewed
CVE-2026-64616 was published Jul 21, 2026
Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and... Low Unreviewed
CVE-2026-64614 was published Jul 21, 2026
Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and... Low Unreviewed
CVE-2026-65061 was published Jul 21, 2026
Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file... Low Unreviewed
CVE-2026-65063 was published Jul 21, 2026
Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file... Low Unreviewed
CVE-2026-65062 was published Jul 21, 2026
Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file... Low Unreviewed
CVE-2026-65068 was published Jul 21, 2026
Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and... Low Unreviewed
CVE-2026-65067 was published Jul 21, 2026
Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and... Low Unreviewed
CVE-2026-65064 was published Jul 21, 2026
Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing... Moderate Unreviewed
CVE-2026-65065 was published Jul 21, 2026
Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file... Low Unreviewed
CVE-2026-65066 was published Jul 21, 2026
Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file... Moderate Unreviewed
CVE-2026-65069 was published Jul 21, 2026
Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerability High
CVE-2026-50526 was published for Microsoft.NET.Build.Containers (NuGet) Jul 21, 2026
File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope Moderate
CVE-2026-55668 was published for github.com/filebrowser/filebrowser/v2 (Go) Jul 20, 2026
DavidCarliez Credited to DavidCarliez and riodrwn riodrwn riodrwn
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database