Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,143
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

188 advisories

Loading
A flaw was found in Moodle. An incorrect capability check in the grade web service allows an... Moderate Unreviewed
CVE-2026-102579 was published Sep 30, 2026
djust's Django model serialization has no sensitive-field denylist: password hashes, privilege flags, and PII on a public view attribute are sent to the client Moderate
CVE-2026-61588 was published for djust (pip) Sep 16, 2026
Rallly before 4.15.0 contains an information disclosure vulnerability in the polls.get tRPC... Moderate Unreviewed
CVE-2026-92565 was published Sep 16, 2026
Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in... High Unreviewed
CVE-2026-76855 was published Sep 16, 2026
A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and... High Unreviewed
CVE-2026-86904 was published Sep 14, 2026
A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8... Moderate Unreviewed
CVE-2026-28836 was published Sep 14, 2026
A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and... High Unreviewed
CVE-2026-28938 was published Sep 14, 2026
AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23)... Moderate Unreviewed
CVE-2026-88875 was published Sep 10, 2026
Exposure of private personal information to an unauthorized actor in Windows Biometric Service... Moderate Unreviewed
CVE-2026-73008 was published Sep 8, 2026
Exposure of private personal information to an unauthorized actor in Windows Universal Plug and... Moderate Unreviewed
CVE-2026-69351 was published Sep 8, 2026
HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user... Low Unreviewed
CVE-2026-21827 was published Aug 31, 2026
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox... High Unreviewed
CVE-2026-74969 was published Aug 18, 2026
Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox... High Unreviewed
CVE-2026-74966 was published Aug 18, 2026
Information Disclosure when IPSec negotiation fails or is not established properly during NG... Moderate Unreviewed
CVE-2026-24078 was published Aug 4, 2026
Cloudreve: Information Exposure in `GET /api/v4/user/search`: `SearchActive` omits the active-status predicate, leaking inactive/banned account emails Moderate
CVE-2026-55496 was published for github.com/cloudreve/Cloudreve/v3 (Go) Jul 24, 2026
riodrwn Credited to riodrwn
Gitea: GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private Moderate
CVE-2026-58510 was published for code.gitea.io/gitea (Go) Jul 21, 2026
Exposure of private personal information to an unauthorized actor in Windows RDP allows an... High Unreviewed
CVE-2026-56171 was published Jul 18, 2026
Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an... Moderate Unreviewed
CVE-2026-50657 was published Jul 14, 2026
9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability... High Unreviewed
CVE-2026-62328 was published Jul 14, 2026
Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android... High Unreviewed
CVE-2026-58297 was published Jul 3, 2026
Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android... High Unreviewed
CVE-2026-58296 was published Jul 3, 2026
Hi.Events through 1.9.0 public check-in list endpoints use short_id as sole access control,... High Unreviewed
CVE-2026-57960 was published Jun 29, 2026
phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability that... High Unreviewed
CVE-2026-56124 was published Jun 29, 2026
A flaw in Node.js proxy tunnel error handling could expose proxy credentials in `ERR_PROXY_TUNNEL... Moderate Unreviewed
CVE-2026-48615 was published Jun 26, 2026
Joomla! Component JoomProject 1.1.3.2 contains an information disclosure vulnerability that... High Unreviewed
CVE-2019-25762 was published Jun 19, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database