Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,974
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

36,855 advisories

Loading
MessagePack: Nested arrays can blow past buffer length limits Moderate
CVE-2026-92707 was published for MessagePack (NuGet) Oct 15, 2026
AArnott Credited to AArnott
Terragrunt catalog predictable temp symlink clobber Moderate
CVE-2026-64672 was published for github.com/gruntwork-io/terragrunt (Go) Oct 15, 2026
br0x2 Credited to br0x2
GitHub CLI allows attestation verification bypass through unescaped regex metacharacters Low
CVE-2026-64655 was published for github.com/cli/cli/v2 (Go) Oct 15, 2026
babakks Credited to babakks, BagToad, helixplant, ajbeattie, and bdehamer BagToad BagToad
helixplant helixplant ajbeattie ajbeattie bdehamer bdehamer
GitHub CLI allows path traversal through unescaped request URL components Low
CVE-2026-64653 was published for github.com/cli/cli/v2 (Go) Oct 15, 2026
babakks Credited to babakks, BagToad, helixplant, and sam-kossey BagToad BagToad
helixplant helixplant sam-kossey sam-kossey
GitHub CLI partially discloses authentication tokens in `gh auth status` output Low
CVE-2026-64652 was published for github.com/cli/cli/v2 (Go) Oct 15, 2026
babakks Credited to babakks, BagToad, weshaggard, and shelbyc BagToad BagToad
weshaggard weshaggard shelbyc shelbyc
Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion High
CVE-2026-72923 was published for Microsoft.OpenApi.Readers (NuGet) Oct 14, 2026
baywet Credited to baywet, gavinbarron, and myDosGyarados gavinbarron gavinbarron
myDosGyarados myDosGyarados
BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extraction Low
CVE-2026-14966 was published for bbot (pip) Oct 14, 2026
tonghuaroot Credited to tonghuaroot
Metalama allows local code execution through DLL planting in shared temporary directories Moderate
CVE-2026-62847 was published for Metalama.Framework (NuGet) Oct 14, 2026
Apprise forwards configured auth headers across cross-origin HTTP redirects Low
CVE-2026-59180 was published for apprise (pip) Oct 14, 2026
gistrec Credited to gistrec
Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-70035 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability High
CVE-2026-70186 was published for Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-70007 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-87697 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability High
CVE-2026-96225 was published for Microsoft.NETCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability High
CVE-2026-96230 was published for Microsoft.AspNetCore.Components.WebAssembly.Server (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege Vulnerability High
CVE-2026-70179 was published for Microsoft.AspNetCore.Authentication.Negotiate (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-96224 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-85363 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability High
CVE-2026-96959 was published for System.Security.Cryptography.Xml (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-83520 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-70174 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure Vulnerability High
CVE-2026-96232 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure Vulnerability Moderate
CVE-2026-96234 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure Vulnerability Moderate
CVE-2026-96229 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-96235 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database