Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,347
Maven
5,000+
npm
5,000+
NuGet
1,042
pip
5,000+
Pub
13
RubyGems
1,122
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+

8 advisories

Loading
Forgejo before 15.0.3 contains a stored cross-site scripting vulnerability that allows... Low Unreviewed
CVE-2026-59102 was published Jul 2, 2026
Woodpecker before 3.15.0 matches the ApprovalAllowedUsers bypass list against pipeline.Author.... Critical Unreviewed
CVE-2026-58370 was published Jun 30, 2026
act: actions/cache server allows malicious cache injection High
CVE-2026-34042 was published for github.com/nektos/act (Go) Mar 27, 2026
programmerjake Credited to programmerjake
In Forgejo through 13.0.3, the attachment component allows a denial of service by uploading a... High Unreviewed
CVE-2025-68971 was published Mar 16, 2026
Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server... Critical Unreviewed
CVE-2025-68937 was published Dec 26, 2025
Forgejo before 1.20.5-1 allows remote attackers to test for the existence of private user... Moderate Unreviewed
CVE-2023-49948 was published Dec 3, 2023
Forgejo before 1.20.5-1 allows 2FA bypass when docker login uses Basic Authentication. High Unreviewed
CVE-2023-49947 was published Dec 3, 2023
In Forgejo before 1.20.5-1, certain endpoints do not check whether an object belongs to a... Critical Unreviewed
CVE-2023-49946 was published Dec 3, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database