Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,143
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

46,190 advisories

Loading
Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to... Low Unreviewed
CVE-2026-108852 was published Oct 11, 2026
open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in... Low Unreviewed
CVE-2026-108722 was published Oct 11, 2026
Cheshire Cat AI core through 2.0.23 contains a stored cross-site scripting vulnerability in the... Moderate Unreviewed
CVE-2026-108725 was published Oct 11, 2026
A vulnerability has been found in InstantSoft icms2 up to 2.18.2. This issue affects the function... Low Unreviewed
CVE-2026-108566 was published Oct 11, 2026
The Subscribe to Comments WordPress plugin before 2.3.3 does not properly validate a parameter... High Unreviewed
CVE-2026-91829 was published Oct 11, 2026
The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form... High Unreviewed
CVE-2026-96227 was published Oct 11, 2026
The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an... High Unreviewed
CVE-2026-88826 was published Oct 11, 2026
The KeyWord Collector WordPress plugin through 1.4 does not have any authorisation or nonce check... High Unreviewed
CVE-2026-88905 was published Oct 11, 2026
The Topcontent WordPress plugin through 1.2.1 does not properly authorise one of its request... High Unreviewed
CVE-2026-88903 was published Oct 11, 2026
The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of... High Unreviewed
CVE-2026-86798 was published Oct 11, 2026
The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not sanitise and... High Unreviewed
CVE-2026-84261 was published Oct 11, 2026
The Web Vitals Tracking WordPress plugin through 5.4.2 does not validate or escape performance... High Unreviewed
CVE-2026-87760 was published Oct 11, 2026
The Adwised Web Push Notification WordPress plugin through 2.5.7 does not have authorisation... High Unreviewed
CVE-2026-87762 was published Oct 11, 2026
The Adwised Web Push Notification WordPress plugin through 2.5.7 does not perform any capability... High Unreviewed
CVE-2026-87761 was published Oct 11, 2026
The BuddyPress Instant Chat WordPress plugin through 1.6 does not check that the sender of a chat... High Unreviewed
CVE-2026-87764 was published Oct 11, 2026
The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values... Moderate Unreviewed
CVE-2026-12980 was published Oct 11, 2026
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting... Moderate Unreviewed
CVE-2026-81155 was published Oct 11, 2026
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text... Moderate Unreviewed
CVE-2026-81154 was published Oct 11, 2026
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image... Moderate Unreviewed
CVE-2026-81153 was published Oct 11, 2026
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery... Moderate Unreviewed
CVE-2026-81156 was published Oct 11, 2026
The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape... High Unreviewed
CVE-2026-84259 was published Oct 11, 2026
The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape... High Unreviewed
CVE-2026-84258 was published Oct 11, 2026
The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and... High Unreviewed
CVE-2026-84260 was published Oct 11, 2026
The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when... High Unreviewed
CVE-2026-103305 was published Oct 11, 2026
Unauthenticated Cross Site Scripting (XSS) in Educavo <= 3.4.2 versions. High Unreviewed
CVE-2026-78534 was published Oct 10, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database