Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,722
Maven
5,000+
npm
5,000+
NuGet
1,116
pip
5,000+
Pub
13
RubyGems
1,152
Rust
1,568
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

369,656 advisories

Loading
Subscriber Broken Authentication in User Registration <= 5.2.6 versions. Moderate Unreviewed
CVE-2026-73995 was published Aug 18, 2026
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions. High Unreviewed
CVE-2026-73351 was published Aug 18, 2026
Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions. High Unreviewed
CVE-2026-73360 was published Aug 18, 2026
Unauthenticated Cross Site Scripting (XSS) in URL Shortify <= 2.5.0 versions. High Unreviewed
CVE-2026-73362 was published Aug 18, 2026
Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions. High Unreviewed
CVE-2026-73375 was published Aug 18, 2026
Contributor Cross Site Scripting (XSS) in Typing Effect <= 1.3.7 versions. Moderate Unreviewed
CVE-2026-66644 was published Aug 18, 2026
n8n is an open source workflow automation platform. Prior to 1.123.64, 2.29.8, and 2.30.1, the... High Unreviewed
CVE-2026-71539 was published Aug 18, 2026
Unauthenticated Cross Site Scripting (XSS) in Convert Pro <= 1.0.1 versions. High Unreviewed
CVE-2026-68567 was published Aug 18, 2026
Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions. High Unreviewed
CVE-2026-73338 was published Aug 18, 2026
Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions. Critical Unreviewed
CVE-2026-73341 was published Aug 18, 2026
Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions. High Unreviewed
CVE-2026-73350 was published Aug 18, 2026
Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions. High Unreviewed
CVE-2026-73358 was published Aug 18, 2026
Unauthenticated Remote File Inclusion in Easy Google Maps < 1.14.2 versions. High Unreviewed
CVE-2026-73367 was published Aug 18, 2026
Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor <= 3.4... High Unreviewed
CVE-2026-73361 was published Aug 18, 2026
Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions. Moderate Unreviewed
CVE-2026-73352 was published Aug 18, 2026
Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions. Moderate Unreviewed
CVE-2026-68568 was published Aug 18, 2026
Contributor Cross Site Scripting (XSS) in Video Conferencing with Zoom <= 4.6.8 versions. Moderate Unreviewed
CVE-2026-66641 was published Aug 18, 2026
Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions. High Unreviewed
CVE-2026-73342 was published Aug 18, 2026
Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6... High Unreviewed
CVE-2026-73181 was published Aug 18, 2026
Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions. Critical Unreviewed
CVE-2026-73343 was published Aug 18, 2026
Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions. Moderate Unreviewed
CVE-2026-68565 was published Aug 18, 2026
Unauthenticated Arbitrary Content Deletion in Breeze <= 2.5.12 versions. High Unreviewed
CVE-2026-73356 was published Aug 18, 2026
Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4... Moderate Unreviewed
CVE-2026-73359 was published Aug 18, 2026
Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions. Critical Unreviewed
CVE-2026-73339 was published Aug 18, 2026
Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions. Critical Unreviewed
CVE-2026-73365 was published Aug 18, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database