Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,508
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

122 advisories

Loading
Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile... Critical Unreviewed
CVE-2026-2346 was published Aug 3, 2026
Vikunja versions >= 0.24.0 and <= 2.3.0 contain a broken object level authorization (BOLA)... Critical Unreviewed
CVE-2026-68582 was published Aug 2, 2026
ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers... Critical Unreviewed
CVE-2026-67342 was published Aug 1, 2026
Cal.com OSS ships lacks authorization on webhook teamId creation, allowing any authenticated user... Critical Unreviewed
CVE-2026-16624 was published Jul 22, 2026
OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console... Critical Unreviewed
CVE-2026-66013 was published Jul 25, 2026
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that... Critical Unreviewed
CVE-2026-28316 was published Jul 21, 2026
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that... Critical Unreviewed
CVE-2026-28313 was published Jul 21, 2026
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that... Critical Unreviewed
CVE-2026-28305 was published Jul 21, 2026
SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to... Critical Unreviewed
CVE-2026-28314 was published Jul 21, 2026
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that... Critical Unreviewed
CVE-2026-28317 was published Jul 21, 2026
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that... Critical Unreviewed
CVE-2026-28302 was published Jul 21, 2026
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that... Critical Unreviewed
CVE-2026-28308 was published Jul 21, 2026
Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. Enterprise Video... Critical Unreviewed
CVE-2026-12693 was published Jul 17, 2026
Vikunja before 2.2.1 contains an authorization flaw where the LinkSharing.ReadAll endpoint... Critical Unreviewed
CVE-2026-56765 was published Jul 10, 2026
An authenticated user could manipulate a company ID parameter in a POST request to the backend to... Critical Unreviewed
CVE-2026-12686 was published Jul 6, 2026
Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient... Critical Unreviewed
CVE-2022-36202 was published Sep 1, 2022
IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that... Critical Unreviewed
CVE-2026-10140 was published Jun 30, 2026
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to... Critical Unreviewed
CVE-2026-12073 was published Jun 30, 2026
Dify version 1.14.1 and prior contains an authorization bypass vulnerability that allows... Critical Unreviewed
CVE-2026-41947 was published May 18, 2026
Multiple MISP core controllers and model capture paths accepted client-controlled request fields... Critical Unreviewed
CVE-2026-56422 was published Jun 22, 2026
A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens (JWTs)... Critical Unreviewed
CVE-2026-53471 was published Jun 10, 2026
A flaw was found in migration-planner. An authenticated attacker could exploit an improper access... Critical Unreviewed
CVE-2026-53470 was published Jun 10, 2026
Authorization Bypass Through User-Controlled Key vulnerability in CB Project Ltd. Co. CVLand... Critical Unreviewed
CVE-2025-0987 was published Nov 3, 2025
Authorization bypass through User-Controlled key vulnerability in HAVELSAN Inc. Geographic... Critical Unreviewed
CVE-2026-6208 was published Jun 5, 2026
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ariva Computer Accord... Critical Unreviewed
CVE-2024-1744 was published Sep 6, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database