Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,722
Maven
5,000+
npm
5,000+
NuGet
1,116
pip
5,000+
Pub
13
RubyGems
1,152
Rust
1,568
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

9,272 advisories

Loading
Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010... Moderate Unreviewed
CVE-2026-87449 was published Sep 9, 2026
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker... Moderate Unreviewed
CVE-2026-9215 was published Sep 8, 2026
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request... High Unreviewed
CVE-2026-86724 was published Sep 8, 2026
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request... High Unreviewed
CVE-2026-86718 was published Sep 8, 2026
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 (master) contains a cross... Moderate Unreviewed
CVE-2026-86719 was published Sep 8, 2026
A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot... High Unreviewed
CVE-2026-86135 was published Sep 8, 2026
A cross-site request forgery vulnerability was discovered in the login functionality (both... Moderate Unreviewed
CVE-2026-33920 was published Sep 8, 2026
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request... Low Unreviewed
CVE-2026-76961 was published Sep 8, 2026
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request... Low Unreviewed
CVE-2026-76960 was published Sep 8, 2026
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request... Moderate Unreviewed
CVE-2026-76959 was published Sep 8, 2026
A security vulnerability has been detected in light0011 cms... Low Unreviewed
CVE-2026-86307 was published Sep 7, 2026
A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management &... Low Unreviewed
CVE-2026-86281 was published Sep 7, 2026
A vulnerability was determined in diem-project diem up to 5.1.3. This affects the function... Low Unreviewed
CVE-2026-86182 was published Sep 6, 2026
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request... High Unreviewed
CVE-2026-82712 was published Sep 4, 2026
Cross-Site Request Forgery (CSRF) in the OrderConfirmController at GET /order/confirm/... Moderate Unreviewed
CVE-2026-82911 was published Sep 4, 2026
A cross-site request forgery (CSRF) vulnerability exists in MISP due to form-security and CSRF... Moderate Unreviewed
CVE-2026-85547 was published Sep 4, 2026
MISP contains a cross-site request forgery (CSRF) vulnerability in the sharing group quick-edit... High Unreviewed
CVE-2026-85546 was published Sep 4, 2026
Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio) High
CVE-2026-73222 was published for claude-code-templates (npm) Sep 3, 2026
spartan8806 Credited to spartan8806
Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation High
CVE-2026-73292 was published for github.com/semaphoreui/semaphore (Go) Sep 3, 2026
CamilleGR Credited to CamilleGR
A cross-site request forgery (CSRF) vulnerability existed in the cullEmptyEvents action of MISP.... High Unreviewed
CVE-2026-85236 was published Sep 3, 2026
AVideo through commit c91b5975d contains a cross-site request forgery vulnerability in plugin... High Unreviewed
CVE-2026-85162 was published Sep 3, 2026
AVideo through commit c91b5975d contains a cross-site request forgery vulnerability in... Moderate Unreviewed
CVE-2026-85161 was published Sep 3, 2026
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin... Moderate Unreviewed
CVE-2026-84663 was published Sep 2, 2026
In Stapler 1839.ved17667b_a_eb_5 through 2107.v8dfcb_e8ed317 (both inclusive), except 2088.2093... High Unreviewed
CVE-2026-84649 was published Sep 2, 2026
The Simple Membership MailChimp Integration WordPress plugin before 1.9.8 does not have CSRF... Moderate Unreviewed
CVE-2026-8151 was published Sep 2, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database