Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,509
Maven
5,000+
npm
5,000+
NuGet
1,100
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

374 advisories

Loading
The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to... Critical Unreviewed
CVE-2026-16230 was published Aug 11, 2026
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute... High Unreviewed
CVE-2026-70337 was published Aug 11, 2026
Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges... High Unreviewed
CVE-2026-65810 was published Aug 11, 2026
Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose... Moderate Unreviewed
CVE-2026-62837 was published Aug 11, 2026
Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct... High Unreviewed
CVE-2026-53416 was published Aug 11, 2026
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected... High Unreviewed
CVE-2026-16053 was published Aug 11, 2026
Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access... Moderate Unreviewed
CVE-2026-21082 was published Aug 10, 2026
A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA... High Unreviewed
CVE-2026-10595 was published Aug 9, 2026
Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path... Moderate Unreviewed
CVE-2026-56794 was published Aug 7, 2026
Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows... High Unreviewed
CVE-2026-18907 was published Aug 5, 2026
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files High
CVE-2026-54910 was published for github.com/gtsteffaniak/filebrowser/backend (Go) Jul 31, 2026
je-lv Credited to je-lv
hashi-vault-js has a path traversal and query parameter injection High
CVE-2026-55100 was published for hashi-vault-js (npm) Jul 31, 2026
Sebasteuo Credited to Sebasteuo
VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing... High Unreviewed
CVE-2026-18192 was published Jul 29, 2026
A Path Traversal vulnerability exists in Quick.CMS through the URI path component of HTTP... Moderate Unreviewed
CVE-2026-63303 was published Jul 28, 2026
The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to... High Unreviewed
CVE-2026-15802 was published Jul 22, 2026
File Browser: Archive builder turns backslash filenames into path traversal (zip-slip) Moderate
CVE-2026-62843 was published for github.com/filebrowser/filebrowser/v2 (Go) Jul 20, 2026
je-lv Credited to je-lv and hacdias hacdias hacdias
Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain... Moderate Unreviewed
CVE-2026-51026 was published Jul 20, 2026
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code... High Unreviewed
CVE-2026-56196 was published Jul 14, 2026
Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate... High Unreviewed
CVE-2026-50454 was published Jul 14, 2026
Relative path traversal in DNS Server allows an authorized attacker to execute code over an... Moderate Unreviewed
CVE-2026-50426 was published Jul 14, 2026
Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized... High Unreviewed
CVE-2026-50663 was published Jul 14, 2026
Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over... High Unreviewed
CVE-2026-40400 was published Jul 14, 2026
Path traversal in Ivanti  Xtraction before version 2026.2.1 allows a remote authenticated... High Unreviewed
CVE-2026-14903 was published Jul 14, 2026
SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read), Incomplete fix of CVE-2026-41894 High
CVE-2026-54066 was published for github.com/siyuan-note/siyuan/kernel (Go) Jul 10, 2026
aslein1413-sys Credited to aslein1413-sys
In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project... Critical Unreviewed
CVE-2026-59792 was published Jul 10, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database