GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
73
GitHub Actions
53
Go
4,029
Maven
5,000+
npm
5,000+
NuGet
976
pip
5,000+
Pub
13
RubyGems
1,070
Rust
1,404
Swift
61
Unreviewed advisories
All unreviewed
5,000+
228 advisories
Filter by severity
A sensitive information disclosure security issue exists within the affected CompactLogix...
Moderate
Unreviewed
CVE-2026-9307
was published
Jun 16, 2026
Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.4.1 versions.
Moderate
Unreviewed
CVE-2026-48878
was published
Jun 15, 2026
Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions.
Moderate
Unreviewed
CVE-2026-42660
was published
Jun 15, 2026
Subscriber Sensitive Data Exposure in WPPizza <= 3.19.9 versions.
Moderate
Unreviewed
CVE-2026-40796
was published
Jun 15, 2026
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in...
Moderate
Unreviewed
CVE-2026-24618
was published
Jun 12, 2026
Improper access control in AMD uProf may allow a local attacker with user privileges to write to...
Moderate
Unreviewed
CVE-2026-0466
was published
Jun 9, 2026
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips...
Moderate
Unreviewed
CVE-2026-49077
was published
Jun 4, 2026
The SAP Gateway allows attackers to inject content into error messages, potentially leading to...
Moderate
Unreviewed
CVE-2026-44749
was published
May 26, 2026
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in...
Moderate
Unreviewed
CVE-2026-27349
was published
May 21, 2026
An information disclosure vulnerability in Trust Protection Foundation enables an authenticated...
Moderate
Unreviewed
CVE-2026-0240
was published
May 13, 2026
An information disclosure vulnerability in the Chronosphere Chronocollector enables an...
Moderate
Unreviewed
CVE-2026-0239
was published
May 13, 2026
SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through...
Moderate
Unreviewed
CVE-2026-7864
was published
May 8, 2026
Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that...
Moderate
Unreviewed
CVE-2026-41928
was published
May 8, 2026
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in...
Moderate
Unreviewed
CVE-2026-25468
was published
May 7, 2026
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in...
Moderate
Unreviewed
CVE-2026-42644
was published
Apr 29, 2026
Duplicate Advisory: OpenClaw Has a Gateway Control Interface Information Disclosure Vulnerability
Moderate
GHSA-fjm8-mgc9-mf65
was published
for
openclaw
(npm)
Apr 24, 2026
•
withdrawn
Duplicate Advisory: OpenClaw: Gateway hello snapshots exposed host config and state paths to non-admin clients
Moderate
GHSA-r7p2-r9g4-4xph
was published
for
openclaw
(npm)
Apr 24, 2026
•
withdrawn
Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability...
Moderate
Unreviewed
CVE-2026-41459
was published
Apr 22, 2026
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in...
Moderate
Unreviewed
CVE-2026-39686
was published
Apr 8, 2026
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in...
Moderate
Unreviewed
CVE-2026-39571
was published
Apr 8, 2026
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP...
Moderate
Unreviewed
CVE-2026-39536
was published
Apr 8, 2026
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in...
Moderate
Unreviewed
CVE-2026-39516
was published
Apr 8, 2026
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in...
Moderate
Unreviewed
CVE-2026-39572
was published
Apr 8, 2026
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in...
Moderate
Unreviewed
CVE-2026-39566
was published
Apr 8, 2026
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in...
Moderate
Unreviewed
CVE-2026-39469
was published
Apr 8, 2026
ProTip!
Advisories are also available from the
GraphQL API