Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
49
GitHub Actions
50
Go
3,599
Maven
5,000+
npm
5,000+
NuGet
924
pip
4,828
Pub
13
RubyGems
1,045
Rust
1,256
Swift
53
Unreviewed advisories
All unreviewed
5,000+

4,502 advisories

Loading
i18next-locize-backend has URL Injection via Unsanitized Path Parameters Moderate
GHSA-mgcp-mfp8-3q45 was published for i18next-locize-backend (npm) Apr 22, 2026
i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns Moderate
GHSA-q89c-q3h5-w34g was published for i18next-http-backend (npm) Apr 22, 2026
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is some... Moderate Unreviewed
CVE-2026-6799 was published Apr 22, 2026
The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if... High Unreviewed
CVE-2026-0972 was published Apr 21, 2026
User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers... Moderate Unreviewed
CVE-2026-1089 was published Apr 21, 2026
A flaw has been found in phili67 Ecclesia CRM up to 8.0.0. This affects the function... Moderate Unreviewed
CVE-2026-6628 was published Apr 20, 2026
A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.0. This vulnerability affects... Moderate Unreviewed
CVE-2026-6629 was published Apr 20, 2026
A vulnerability was detected in langflow-ai langflow up to 1.8.3. The impacted element is the... Moderate Unreviewed
CVE-2026-6599 was published Apr 20, 2026
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this... Moderate Unreviewed
CVE-2026-6603 was published Apr 20, 2026
A vulnerability was identified in ProjectsAndPrograms School Management System up to... Moderate Unreviewed
CVE-2026-6595 was published Apr 20, 2026
A vulnerability was determined in liangliangyy DjangoBlog up to 2.1.0.0. The affected element is... Moderate Unreviewed
CVE-2026-6576 was published Apr 19, 2026
A flaw has been found in dameng100 muucmf 1.9.5.20260309. Impacted is the function getListByPage... Moderate Unreviewed
CVE-2026-6562 was published Apr 19, 2026
MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade Moderate
CVE-2026-41319 was published for MailKit (NuGet) Apr 18, 2026
ROCmertakdag Credited to ROCmertakdag
A weakness has been identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593.... Moderate Unreviewed
CVE-2026-6490 was published Apr 17, 2026
A vulnerability was identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593.... Moderate Unreviewed
CVE-2026-6488 was published Apr 17, 2026
The Quiz And Survey Master plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in... Moderate Unreviewed
CVE-2026-5797 was published Apr 17, 2026
A vulnerability was determined in aandrew-me ytDownloader up to 3.20.2. This affects the function... Moderate Unreviewed
CVE-2026-6219 was published Apr 13, 2026
A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an unknown... Moderate Unreviewed
CVE-2026-6202 was published Apr 13, 2026
A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. The... Moderate Unreviewed
CVE-2026-6189 was published Apr 13, 2026
A security flaw has been discovered in PHPGurukul Daily Expense Tracking System 1.1. Affected is... Moderate Unreviewed
CVE-2026-6193 was published Apr 13, 2026
A vulnerability was found in itsourcecode Construction Management System 1.0. The impacted... Moderate Unreviewed
CVE-2026-6190 was published Apr 13, 2026
A vulnerability was determined in itsourcecode Construction Management System 1.0. This affects... Moderate Unreviewed
CVE-2026-6191 was published Apr 13, 2026
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an... Moderate Unreviewed
CVE-2026-6188 was published Apr 13, 2026
A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. This... Moderate Unreviewed
CVE-2026-6187 was published Apr 13, 2026
A security flaw has been discovered in code-projects Simple Content Management System 1.0.... Moderate Unreviewed
CVE-2026-6183 was published Apr 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database