Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,508
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

98 advisories

Loading
Vulnerability in the Oracle Order Entry product of Oracle E-Business Suite (component: Internal... Low Unreviewed
CVE-2026-60847 was published Jul 22, 2026
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally... Low Unreviewed
CVE-2026-0275 was published Jul 9, 2026
A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a... Low Unreviewed
CVE-2026-0276 was published Jul 9, 2026
OpenClaw: Bootstrap token replay could widen pending pairing scopes Low
CVE-2026-53862 was published for openclaw (npm) Jun 18, 2026
YLChen-007 Credited to YLChen-007
In multiple functions of AppOpsService.java, there is a possible missing permission check due to... Low Unreviewed
CVE-2026-28586 was published Jun 2, 2026
In handleBondStateChanged of AdapterService.java, there is a possible sensitive information... Low Unreviewed
CVE-2026-0050 was published Jun 2, 2026
In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to... Low Unreviewed
CVE-2026-0016 was published Jun 2, 2026
Northern.tech Mender Enterprise Server before 4.1.1 has Incorrect Access Control. Low Unreviewed
CVE-2026-33552 was published May 27, 2026
ciguard: Container image runs as root (no USER directive) Low
CVE-2026-44218 was published for ciguard (pip) May 5, 2026
PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may... Low Unreviewed
CVE-2026-31369 was published Apr 21, 2026
OpenClaw: Gateway plugin HTTP `auth: gateway` widens identity-bearing `operator.read` requests into runtime `operator.write` Low
CVE-2026-42429 was published for openclaw (npm) Apr 9, 2026
smaeljaish771 Credited to smaeljaish771 and KeenSecurityLab KeenSecurityLab KeenSecurityLab
ADB(Android Debug Bridge) is affected by type privilege bypass, successful exploitation of this... Low Unreviewed
CVE-2025-57840 was published Dec 24, 2025
An Improper Privilege Management vulnerability [CWE-269] in Fortinet FortiOS 7.6.0 through 7.6.3,... Low Unreviewed
CVE-2025-54821 was published Nov 18, 2025
Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001... Low Unreviewed
CVE-2025-24307 was published Nov 11, 2025
ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4... Low Unreviewed
CVE-2025-5496 was published Oct 21, 2025
Deno's --deny-read check does not prevent permission bypass Low
CVE-2025-61786 was published for deno (Rust) Oct 8, 2025
dellalibera Credited to dellalibera
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in... Low Unreviewed
CVE-2025-5494 was published Sep 25, 2025
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ... Low Unreviewed
CVE-2025-53029 was published Jul 15, 2025
Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Native Image). ... Low Unreviewed
CVE-2025-50065 was published Jul 15, 2025
Vulnerability in the Oracle Database Materialized View component of Oracle Database Server. ... Low Unreviewed
CVE-2025-50066 was published Jul 15, 2025
Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that... Low Unreviewed
CVE-2025-6943 was published Jul 2, 2025
The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0.... Low Unreviewed
CVE-2025-22829 was published Jun 11, 2025
An authenticated administrator could modify the Created By username for a user account Low Unreviewed
CVE-2025-46744 was published May 12, 2025
A broken access control vulnerability previously discovered in the Trend Vision One Role Name... Low Unreviewed
CVE-2025-31285 was published Apr 2, 2025
An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a... Low Unreviewed
CVE-2025-31286 was published Apr 2, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database