Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,741
Maven
5,000+
npm
5,000+
NuGet
1,116
pip
5,000+
Pub
13
RubyGems
1,152
Rust
1,570
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

335,406 advisories

Loading
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. This affects an... Low Unreviewed
CVE-2026-90604 was published Sep 14, 2026
A security vulnerability has been detected in Totolink A3002MU Hh-B20211125.1046. This issue... High Unreviewed
CVE-2026-90606 was published Sep 14, 2026
A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by... Moderate Unreviewed
CVE-2026-90602 was published Sep 14, 2026
A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for... Moderate Unreviewed
CVE-2025-63842 was published Sep 14, 2026
A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects... High Unreviewed
CVE-2026-90605 was published Sep 14, 2026
A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by... Moderate Unreviewed
CVE-2026-90603 was published Sep 14, 2026
A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the... Moderate Unreviewed
CVE-2026-90601 was published Sep 14, 2026
A flaw has been found in Rizwan17 inventory-management-system up to... Low Unreviewed
CVE-2026-90599 was published Sep 14, 2026
A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The... Low Unreviewed
CVE-2026-90597 was published Sep 14, 2026
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an... Low Unreviewed
CVE-2026-90600 was published Sep 14, 2026
In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root... Moderate Unreviewed
CVE-2022-42917 was published Sep 14, 2026
A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to... Low Unreviewed
CVE-2026-90598 was published Sep 14, 2026
An issue was discovered in the buffer queue driver in Samsung Automotive Processor Exynos Auto... Moderate Unreviewed
CVE-2024-53922 was published Sep 14, 2026
A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the... Moderate Unreviewed
CVE-2026-90596 was published Sep 14, 2026
FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata... Low Unreviewed
CVE-2026-52296 was published Sep 14, 2026
A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare... Low Unreviewed
CVE-2026-35867 was published Sep 14, 2026
FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in... Low Unreviewed
CVE-2026-52297 was published Sep 14, 2026
A security flaw has been discovered in wxiaoqi Spring-Cloud-Platform 1.0/2.2/3.0. This issue... Low Unreviewed
CVE-2026-90595 was published Sep 13, 2026
A weakness has been identified in TooTallNate Java-WebSocket up to 1.6.1. The impacted element is... Moderate Unreviewed
CVE-2026-90584 was published Sep 13, 2026
A vulnerability was identified in wxiaoqi Spring-Cloud-Platform 3.0.1/3.1.0. This vulnerability... Low Unreviewed
CVE-2026-90594 was published Sep 13, 2026
A vulnerability was determined in embedded-graphics up to 0.8.2. This affects the function... Moderate Unreviewed
CVE-2026-90593 was published Sep 13, 2026
TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable... Low Unreviewed
CVE-2026-38332 was published Sep 13, 2026
The MDJM Event Management WordPress plugin before 1.7.8.5 and the Mobile Events Manager WordPress... High Unreviewed
CVE-2026-88802 was published Sep 13, 2026
A vulnerability was determined in cym1102 nginxWebUI up to 4.4.2. This issue affects the function... Low Unreviewed
CVE-2026-90581 was published Sep 13, 2026
A security flaw has been discovered in kagisearch smallweb up to... Moderate Unreviewed
CVE-2026-90583 was published Sep 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database