Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,347
Maven
5,000+
npm
5,000+
NuGet
1,042
pip
5,000+
Pub
13
RubyGems
1,123
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+

289 advisories

Loading
Guzzle: Cookie Disclosure and Injection via IP-Address Domains Moderate
CVE-2026-59883 was published for guzzlehttp/guzzle (Composer) Jul 20, 2026
GrahamCampbell Credited to GrahamCampbell
FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data Moderate
CVE-2026-53656 was published for fiftyone (pip) Jul 15, 2026
vittorio-prodomo Credited to vittorio-prodomo, mo-getter, benjaminpkane, kevin-dimichel, AdonaiVera, and AAtomical mo-getter mo-getter
benjaminpkane benjaminpkane kevin-dimichel kevin-dimichel AdonaiVera AdonaiVera AAtomical AAtomical
Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125... Moderate Unreviewed
CVE-2026-15768 was published Jul 14, 2026
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote... Moderate Unreviewed
CVE-2026-15775 was published Jul 14, 2026
Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing Moderate
CVE-2026-55438 was published for github.com/coder/coder/v2 (Go) Jul 6, 2026
Flowise before 3.1.2 sets Access-Control-Allow-Origin to a hardcoded wildcard (*) on its text-to... Moderate Unreviewed
CVE-2026-56277 was published Jul 1, 2026
Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed a... Moderate Unreviewed
CVE-2026-14079 was published Jul 1, 2026
Inappropriate implementation in FedCM in Google Chrome prior to 150.0.7871.47 allowed a remote... Moderate Unreviewed
CVE-2026-14057 was published Jul 1, 2026
Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a... Moderate Unreviewed
CVE-2026-14053 was published Jul 1, 2026
Insufficient policy enforcement in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a... Moderate Unreviewed
CVE-2026-14039 was published Jul 1, 2026
Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 150.0.7871.47... Moderate Unreviewed
CVE-2026-14046 was published Jul 1, 2026
Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 150.0.7871.47... Moderate Unreviewed
CVE-2026-13913 was published Jul 1, 2026
Inappropriate implementation in NFC in Google Chrome on Android prior to 150.0.7871.47 allowed a... Moderate Unreviewed
CVE-2026-13887 was published Jul 1, 2026
Inappropriate implementation in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a... Moderate Unreviewed
CVE-2026-13881 was published Jul 1, 2026
Inappropriate implementation in Network in Google Chrome on Android prior to 150.0.7871.47... Moderate Unreviewed
CVE-2026-13868 was published Jul 1, 2026
Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote... Moderate Unreviewed
CVE-2026-13839 was published Jul 1, 2026
Insufficient policy enforcement in Canvas in Google Chrome prior to 150.0.7871.47 allowed a... Moderate Unreviewed
CVE-2026-13840 was published Jul 1, 2026
Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote... Moderate Unreviewed
CVE-2026-13838 was published Jul 1, 2026
Inappropriate implementation in Extensions in Google Chrome on Android prior to 150.0.7871.47... Moderate Unreviewed
CVE-2026-13822 was published Jul 1, 2026
Inappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47... Moderate Unreviewed
CVE-2026-13826 was published Jul 1, 2026
Insufficient policy enforcement in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote... Moderate Unreviewed
CVE-2026-13793 was published Jul 1, 2026
A cross-origin issue was addressed with improved tracking of security origins. This issue is... Moderate Unreviewed
CVE-2026-43700 was published Jun 29, 2026
Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.197 allowed a... Moderate Unreviewed
CVE-2026-13034 was published Jun 24, 2026
Inappropriate implementation in DeviceBoundSessionCredentials in Google Chrome prior to 149.0... Moderate Unreviewed
CVE-2026-13021 was published Jun 24, 2026
Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.197 allowed a... Moderate Unreviewed
CVE-2026-13022 was published Jun 24, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database