Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
40
Go
2,951
Maven
5,000+
npm
4,597
NuGet
787
pip
4,304
Pub
12
RubyGems
982
Rust
1,121
Swift
49
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

138,124 advisories

Loading
Crafted zones can lead to increased incoming network traffic. Moderate Unreviewed
CVE-2026-24027 was published Feb 9, 2026
Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache... Moderate Unreviewed
CVE-2026-0398 was published Feb 9, 2026
Insecure Storage of Sensitive Information vulnerability in Birtech Information Technologies... Moderate Unreviewed
CVE-2025-10464 was published Feb 9, 2026
A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU ... Moderate Unreviewed
CVE-2025-14831 was published Feb 9, 2026
Crafted delegations or IP fragments can poison cached delegations in Recursor. Moderate Unreviewed
CVE-2025-59024 was published Feb 9, 2026
Stored Cross-Site Scripting (XSS) vulnerability in Loggro Pymes, via the 'descripción' ... Moderate Unreviewed
CVE-2026-1959 was published Feb 9, 2026
A vulnerability was found in D-Link DCS-931L up to 1.13.0. Impacted is the function doSystem of... Moderate Unreviewed
CVE-2026-2227 was published Feb 9, 2026
A vulnerability has been found in DouPHP up to 1.9. This issue affects some unknown processing of... Moderate Unreviewed
CVE-2026-2226 was published Feb 9, 2026
Insertion of Sensitive Information Into Sent Data vulnerability in Atlas Educational Software... Moderate Unreviewed
CVE-2025-7708 was published Feb 9, 2026
The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Server-Side Request... Moderate Unreviewed
CVE-2026-0632 was published Feb 9, 2026
In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs Moderate Unreviewed
CVE-2026-25846 was published Feb 9, 2026
Stored Cross-Site Scripting (XSS) vulnerability in Loggro Pymes, via the 'Facebook' parameter in ... Moderate Unreviewed
CVE-2026-1960 was published Feb 9, 2026
A flaw has been found in itsourcecode News Portal Project 1.0. This vulnerability affects unknown... Moderate Unreviewed
CVE-2026-2225 was published Feb 9, 2026
The Python code being run by 'runPython' or 'runPythonAsync' is not isolated from the rest of the... Moderate Unreviewed
CVE-2026-25905 was published Feb 9, 2026
The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive... Moderate Unreviewed
CVE-2026-25904 was published Feb 9, 2026
Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does... Moderate Unreviewed
CVE-2026-25916 was published Feb 9, 2026
A vulnerability was detected in code-projects Online Reviewer System 1.0. This affects an unknown... Moderate Unreviewed
CVE-2026-2224 was published Feb 9, 2026
A vulnerability was identified in code-projects Online Reviewer System 1.0. This impacts an... Moderate Unreviewed
CVE-2026-2220 was published Feb 9, 2026
A weakness has been identified in code-projects Online Reviewer System 1.0. Affected by this... Moderate Unreviewed
CVE-2026-2222 was published Feb 9, 2026
A security flaw has been discovered in code-projects Online Reviewer System 1.0. Affected is an... Moderate Unreviewed
CVE-2026-2221 was published Feb 9, 2026
A security vulnerability has been detected in code-projects Online Reviewer System 1.0. Affected... Moderate Unreviewed
CVE-2026-2223 was published Feb 9, 2026
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The... Moderate Unreviewed
CVE-2025-66607 was published Feb 9, 2026
A flaw has been found in rachelos WeRSS we-mp-rss up to 1.4.8. Impacted is the function... Moderate Unreviewed
CVE-2026-2216 was published Feb 9, 2026
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This... Moderate Unreviewed
CVE-2025-66596 was published Feb 9, 2026
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Detailed... Moderate Unreviewed
CVE-2025-66594 was published Feb 9, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database