Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

1,648 advisories

Loading
virtualenv: Seeded files retain permissions from an older cache Moderate
CVE-2026-113720 was published for virtualenv (pip) Oct 23, 2026
A local privilege escalation vulnerability in the optional dnscache package of Zimbra... High Unreviewed
CVE-2026-93640 was published Oct 23, 2026
A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZCS) MTA package... High Unreviewed
CVE-2026-50057 was published Oct 23, 2026
CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7... Critical Unreviewed
CVE-2025-30054 was published Oct 23, 2026
The CGM CLININET application stores the production database login and password, as well as... Moderate Unreviewed
CVE-2025-30051 was published Oct 23, 2026
NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability.... High Unreviewed
CVE-2026-111184 was published Oct 21, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco... High Unreviewed
CVE-2026-76495 was published Oct 21, 2026
Adm-zip before 0.6.1 contains an incorrect permission assignment vulnerability that allows... Moderate Unreviewed
CVE-2026-114105 was published Oct 21, 2026
Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment... High Unreviewed
CVE-2026-71169 was published Oct 19, 2026
Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat ... Moderate Unreviewed
CVE-2026-96542 was published Oct 16, 2026
Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows... High Unreviewed
CVE-2026-96424 was published Oct 16, 2026
Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command... Moderate Unreviewed
CVE-2026-96425 was published Oct 16, 2026
The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`)... Unknown Unreviewed
CVE-2026-92228 was published Oct 16, 2026
An incorrect permission assignment for critical resource vulnerability has been reported to... High Unreviewed
CVE-2026-34008 was published Oct 15, 2026
An incorrect permission assignment for critical resource vulnerability has been reported to... High Unreviewed
CVE-2026-34014 was published Oct 15, 2026
On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log.... Moderate Unreviewed
CVE-2026-104618 was published Oct 15, 2026
Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. ... High Unreviewed
CVE-2026-87093 was published Oct 14, 2026
The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES... Moderate Unreviewed
CVE-2026-78632 was published Oct 13, 2026
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an... High Unreviewed
CVE-2026-97800 was published Oct 13, 2026
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an... High Unreviewed
CVE-2026-97792 was published Oct 13, 2026
An incorrect permission assignment for critical resource issue exists in AssetView, AssetView... High Unreviewed
CVE-2026-101020 was published Oct 13, 2026
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign... High Unreviewed
CVE-2026-85971 was published Oct 12, 2026
Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability... High Unreviewed
CVE-2026-109358 was published Oct 12, 2026
FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that... Moderate Unreviewed
CVE-2026-109243 was published Oct 12, 2026
FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert... Moderate Unreviewed
CVE-2026-109244 was published Oct 12, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database