Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,475
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,144
Rust
1,510
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

623 advisories

Loading
MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that... High Unreviewed
CVE-2026-66420 was published Jul 31, 2026
MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding (Host/Origin) protection Moderate
CVE-2026-63118 was published for mcp (RubyGems) Jul 30, 2026
tonghuaroot Credited to tonghuaroot, dodge1218, and hewei-gikaku dodge1218 dodge1218
hewei-gikaku hewei-gikaku
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72... Moderate Unreviewed
CVE-2026-18016 was published Jul 30, 2026
Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed... Low Unreviewed
CVE-2026-18000 was published Jul 30, 2026
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a... Low Unreviewed
CVE-2026-17997 was published Jul 30, 2026
Policy bypass in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak... Moderate Unreviewed
CVE-2026-17977 was published Jul 30, 2026
Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote... Moderate Unreviewed
CVE-2026-17981 was published Jul 30, 2026
Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72... Low Unreviewed
CVE-2026-17984 was published Jul 30, 2026
Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote... Moderate Unreviewed
CVE-2026-17963 was published Jul 30, 2026
Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.72 allowed a remote... Low Unreviewed
CVE-2026-17957 was published Jul 30, 2026
Policy bypass in MHTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak... Moderate Unreviewed
CVE-2026-17954 was published Jul 30, 2026
Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote... Moderate Unreviewed
CVE-2026-17959 was published Jul 30, 2026
Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an... Moderate Unreviewed
CVE-2026-17927 was published Jul 30, 2026
Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a... Moderate Unreviewed
CVE-2026-17933 was published Jul 30, 2026
Inappropriate implementation in Cast in Google Chrome on Android prior to 151.0.7922.72 allowed a... Moderate Unreviewed
CVE-2026-17925 was published Jul 30, 2026
Inappropriate implementation in ORB in Google Chrome prior to 151.0.7922.72 allowed a remote... Moderate Unreviewed
CVE-2026-17897 was published Jul 30, 2026
Inappropriate implementation in Enterprise in Google Chrome on Windows prior to 151.0.7922.72... Moderate Unreviewed
CVE-2026-17900 was published Jul 30, 2026
Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed... Moderate Unreviewed
CVE-2026-17904 was published Jul 30, 2026
Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a... Moderate Unreviewed
CVE-2026-17895 was published Jul 30, 2026
Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a... Moderate Unreviewed
CVE-2026-17905 was published Jul 30, 2026
Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed... Moderate Unreviewed
CVE-2026-17910 was published Jul 30, 2026
Insufficient policy enforcement in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote... Moderate Unreviewed
CVE-2026-17911 was published Jul 30, 2026
Insufficient policy enforcement in Settings in Google Chrome prior to 151.0.7922.72 allowed a... High Unreviewed
CVE-2026-17916 was published Jul 30, 2026
Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote... Moderate Unreviewed
CVE-2026-17883 was published Jul 30, 2026
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a... Moderate Unreviewed
CVE-2026-17871 was published Jul 30, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database