Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,393
Maven
5,000+
npm
5,000+
NuGet
1,048
pip
5,000+
Pub
13
RubyGems
1,124
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

315,770 advisories

Loading
HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to... Low Unreviewed
CVE-2026-56579 was published Jul 21, 2026
HCL MyCloud was affected by Using Components with Known Vulnerability ( IIS Server ). It may... Low Unreviewed
CVE-2026-56580 was published Jul 21, 2026
HCL MyCloud was affected with Weak Password Policy. It may increase the risk of account... Low Unreviewed
CVE-2026-56577 was published Jul 21, 2026
HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this... Low Unreviewed
CVE-2026-56582 was published Jul 21, 2026
HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit... Low Unreviewed
CVE-2026-56578 was published Jul 21, 2026
HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of... Low Unreviewed
CVE-2026-56583 was published Jul 21, 2026
HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of... Low Unreviewed
CVE-2026-56581 was published Jul 21, 2026
This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0... High Unreviewed
CVE-2026-21579 was published Jul 21, 2026
In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check... Moderate Unreviewed
CVE-2026-16243 was published Jul 21, 2026
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of... High Unreviewed
CVE-2026-21575 was published Jul 21, 2026
A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful... High Unreviewed
CVE-2026-44880 was published Jul 21, 2026
This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0,... High Unreviewed
CVE-2026-21577 was published Jul 21, 2026
A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core's... High Unreviewed
CVE-2026-16493 was published Jul 21, 2026
In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer... Moderate Unreviewed
CVE-2026-16439 was published Jul 21, 2026
A SQL injection (CWE-89) and security boundary bypass (CWE-863) vulnerability exists in the... High Unreviewed
CVE-2026-15829 was published Jul 21, 2026
In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an... High Unreviewed
CVE-2026-15724 was published Jul 21, 2026
The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid... Unknown Unreviewed
CVE-2025-68640 was published Jul 21, 2026
Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows... Critical Unreviewed
CVE-2026-64825 was published Jul 21, 2026
In Eclipse hawkBit versions 1.0.3 and prior, a privilege escalation vulnerability (CWE-284 / CWE... Moderate Unreviewed
CVE-2026-16454 was published Jul 21, 2026
A security flaw has been discovered in zsadmin2025 ZS-Admin up to... Low Unreviewed
CVE-2026-16451 was published Jul 21, 2026
Plane contains a multi‑tenant authorization flaw in its asset‑management API that allows... Unknown Unreviewed
CVE-2026-15342 was published Jul 21, 2026
NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper... Moderate Unreviewed
CVE-2026-24232 was published Jul 21, 2026
When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with... High Unreviewed
CVE-2026-15432 was published Jul 21, 2026
SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary... Critical Unreviewed
CVE-2026-28321 was published Jul 21, 2026
SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group... Critical Unreviewed
CVE-2026-28312 was published Jul 21, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database