Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,455
Maven
5,000+
npm
5,000+
NuGet
1,090
pip
5,000+
Pub
13
RubyGems
1,135
Rust
1,509
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,823 advisories

Loading
The WP CTA plugin for WordPress is vulnerable to Server-Side Request Forgery via the ... Moderate Unreviewed
CVE-2026-6089 was published Jul 29, 2026
Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling... High Unreviewed
CVE-2026-58189 was published Jul 29, 2026
The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side... Moderate Unreviewed
CVE-2026-4912 was published Jul 28, 2026
The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery... High Unreviewed
CVE-2026-14869 was published Jul 28, 2026
Pivotick did not validate the URL scheme of node imagePath values derived from graph data before... Moderate Unreviewed
CVE-2026-67173 was published Jul 28, 2026
Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions. High Unreviewed
CVE-2026-65442 was published Jul 28, 2026
Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions. High Unreviewed
CVE-2026-61953 was published Jul 28, 2026
Improper URL validation when handling specific URLs, allows an attacker, under certain conditions... Moderate Unreviewed
CVE-2026-65618 was published Jul 27, 2026
A user with JFrog Artifactory Cargo remote repository read access could make Artifactory request... Moderate Unreviewed
CVE-2026-65925 was published Jul 27, 2026
A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a user,... Moderate Unreviewed
CVE-2026-65923 was published Jul 27, 2026
JFrog Artifactory support for Terraform remote repositories was found to be susceptible to Server... Moderate Unreviewed
CVE-2026-65924 was published Jul 27, 2026
A Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in the... High Unreviewed
CVE-2026-16481 was published Jul 27, 2026
A VCO feature does not sufficiently validate caller-supplied input, allowing requests to be made... Moderate Unreviewed
CVE-2026-17192 was published Jul 27, 2026
Contributor Server Side Request Forgery (SSRF) in Feedzy <= 5.2.4 versions. Moderate Unreviewed
CVE-2026-66437 was published Jul 27, 2026
Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions. Moderate Unreviewed
CVE-2026-65558 was published Jul 27, 2026
Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer &amp; Embedder <= 1... High Unreviewed
CVE-2026-59552 was published Jul 27, 2026
Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static... Moderate Unreviewed
CVE-2026-17534 was published Jul 27, 2026
The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does... High Unreviewed
CVE-2025-15662 was published Jul 27, 2026
A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function... Low Unreviewed
CVE-2026-17458 was published Jul 26, 2026
Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate... Critical Unreviewed
CVE-2026-57106 was published Jul 24, 2026
A flaw was found in Red Hat Quay's notification webhook feature. The Slack and generic webhook... Moderate Unreviewed
CVE-2026-16910 was published Jul 24, 2026
Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate... High Unreviewed
CVE-2026-56167 was published Jul 24, 2026
9Router before 0.4.72 contains a server-side request forgery (SSRF) vulnerability in the /v1/web... High Unreviewed
CVE-2026-63313 was published Jul 24, 2026
Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows... High Unreviewed
CVE-2026-21653 was published Jul 23, 2026
Author Server Side Request Forgery (SSRF) in Complianz <= 7.5.0 versions. Moderate Unreviewed
CVE-2026-65496 was published Jul 23, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database