Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,143
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

5,694 advisories

Loading
pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktop_sync.py... High Unreviewed
CVE-2026-108744 was published Oct 11, 2026
Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB... High Unreviewed
CVE-2026-108546 was published Oct 10, 2026
FusionPBX through 5.6.5 contains an OS command injection vulnerability in call_recordings:... High Unreviewed
CVE-2026-108161 was published Oct 10, 2026
ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file... High Unreviewed
CVE-2026-101947 was published Oct 10, 2026
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL High
CVE-2026-55797 was published for github.com/argoproj/argo-cd/v2 (Go) Oct 9, 2026
kamil-sawicki Credited to kamil-sawicki, yuvalelarat, cherez0ff, McCaulay, ria-labs-security, parameter-ai-security, and zwindler yuvalelarat yuvalelarat
cherez0ff cherez0ff McCaulay McCaulay ria-labs-security ria-labs-security parameter-ai-security parameter-ai-security zwindler zwindler
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary... High Unreviewed
CVE-2026-84057 was published Oct 9, 2026
PraisonAI: Shell command allowlist bypass via find -exec built-in action High
CVE-2026-61434 was published for praisonai (pip) Oct 8, 2026
HiyokoSauna37 Credited to HiyokoSauna37
PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls Critical
CVE-2026-61445 was published for praisonai (pip) Oct 8, 2026
anushkavirgaonkar Credited to anushkavirgaonkar
Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command... Critical Unreviewed
CVE-2026-107780 was published Oct 8, 2026
A command injection vulnerability in the Active Directory Events Listener of Tenable Identity... Critical Unreviewed
CVE-2026-106126 was published Oct 8, 2026
ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to... Critical Unreviewed
CVE-2026-107699 was published Oct 8, 2026
@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js... Critical Unreviewed
CVE-2026-107703 was published Oct 8, 2026
The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability... Critical Unreviewed
CVE-2026-107704 was published Oct 8, 2026
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID... High Unreviewed
CVE-2026-84278 was published Oct 8, 2026
In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied... High Unreviewed
CVE-2026-93858 was published Oct 8, 2026
PraisonAI: SkillTools Executes Scripts Without Path Containment Validation High
CVE-2026-61443 was published for praisonaiagents (pip) Oct 8, 2026
anushkavirgaonkar Credited to anushkavirgaonkar
OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an... Critical Unreviewed
CVE-2026-105110 was published Oct 8, 2026
The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability.... Critical Unreviewed
CVE-2026-107459 was published Oct 8, 2026
An OS command injection vulnerability exists in the REST API management interface of Brocade... High Unreviewed
CVE-2026-94581 was published Oct 8, 2026
An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session... Moderate Unreviewed
CVE-2026-94579 was published Oct 8, 2026
An OS command injection vulnerability exists in the account management subsystem of Brocade... Moderate Unreviewed
CVE-2026-87677 was published Oct 8, 2026
A command injection vulnerability exists in the WebTools administrative interface handling... High Unreviewed
CVE-2026-94586 was published Oct 8, 2026
Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download... High Unreviewed
CVE-2026-87662 was published Oct 8, 2026
An OS command injection vulnerability exists in the configuration management subsystem of Brocade... High Unreviewed
CVE-2026-87675 was published Oct 8, 2026
An OS command injection vulnerability exists in the time and zone management subsystem of Brocade... High Unreviewed
CVE-2026-87666 was published Oct 8, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database