Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,475
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,144
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

3,718 advisories

Loading
A vulnerability in the command line interface of ECOS devices could allow a highly privileged,... High Unreviewed
CVE-2026-44879 was published Jul 21, 2026
GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()` High
GHSA-956x-8gvw-wg5v was published for GitPython (pip) Jul 21, 2026
miauzxw Credited to miauzxw
A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can... Low Unreviewed
CVE-2026-59846 was published Jul 21, 2026
SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 fails to properly escape table... Critical Unreviewed
CVE-2025-71392 was published Jul 18, 2026
An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute... Critical Unreviewed
CVE-2026-52199 was published Jul 17, 2026
An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a... Critical Unreviewed
CVE-2025-65720 was published Jul 16, 2026
LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation... Critical Unreviewed
CVE-2026-30623 was published Jul 16, 2026
LangBot: Authenticated RCE Via MCP Configuration High
CVE-2026-54449 was published for langbot (pip) Jul 15, 2026
MosesOX Credited to MosesOX
Improper neutralization of special elements used in a command ('command injection') in Windows... High Unreviewed
CVE-2026-56197 was published Jul 14, 2026
Improper neutralization of special elements used in a command ('command injection') in Outlook... Moderate Unreviewed
CVE-2026-55145 was published Jul 14, 2026
Improper neutralization of special elements used in a command ('command injection') in Windows... High Unreviewed
CVE-2026-50488 was published Jul 14, 2026
Improper neutralization of special elements used in a command ('command injection') in Windows... High Unreviewed
CVE-2026-58635 was published Jul 14, 2026
Improper neutralization of special elements used in a command ('command injection') in Visual... High Unreviewed
CVE-2026-50520 was published Jul 14, 2026
Improper neutralization of special elements used in a command ('command injection') in Microsoft... Critical Unreviewed
CVE-2026-48561 was published Jul 14, 2026
A vulnerability was found in louisho5 picobot up to 0.2.0. This issue affects the function... Low Unreviewed
CVE-2026-15669 was published Jul 14, 2026
The NPC start endpoint on the web server at port 8090 is vulnerable to command injection. Critical Unreviewed
CVE-2026-22103 was published Jul 13, 2026
The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection. Critical Unreviewed
CVE-2026-22095 was published Jul 13, 2026
A weakness has been identified in Shibby Tomato up to 1.28.0000. This affects the function... Low Unreviewed
CVE-2026-15547 was published Jul 13, 2026
A security flaw has been discovered in Shibby Tomato up to 1.28.0000. Affected by this issue is... Low Unreviewed
CVE-2026-15546 was published Jul 13, 2026
A security flaw has been discovered in Wavlink WL-NU516U1 260515. This affects the function... Low Unreviewed
CVE-2026-15513 was published Jul 13, 2026
A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this... High Unreviewed
CVE-2026-15511 was published Jul 13, 2026
A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the... Low Unreviewed
CVE-2026-15496 was published Jul 12, 2026
A vulnerability has been found in SonicCloudOrg sonic-agent up to 2.7.2. The affected element is... Low Unreviewed
CVE-2026-15495 was published Jul 12, 2026
A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub_41FBD0 of... Moderate Unreviewed
CVE-2026-15487 was published Jul 12, 2026
A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function... Moderate Unreviewed
CVE-2026-15486 was published Jul 12, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database