Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,340
Maven
5,000+
npm
5,000+
NuGet
1,033
pip
5,000+
Pub
13
RubyGems
1,122
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+

541 advisories

Loading
MCP Python SDK: WebSocket server transport does not support Host/Origin validation High
CVE-2026-59950 was published for mcp (pip) Jul 16, 2026
nitish-yaddala Credited to nitish-yaddala, Nadav0077, dodge1218, gistrec, and u-ktdi Nadav0077 Nadav0077
dodge1218 dodge1218 gistrec gistrec u-ktdi u-ktdi
An unauthenticated remote attacker can execute any command on the affected device due to not... Critical Unreviewed
CVE-2023-49899 was published Jul 16, 2026
FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data Moderate
CVE-2026-53656 was published for fiftyone (pip) Jul 15, 2026
vittorio-prodomo Credited to vittorio-prodomo, mo-getter, benjaminpkane, kevin-dimichel, AdonaiVera, and AAtomical mo-getter mo-getter
benjaminpkane benjaminpkane kevin-dimichel kevin-dimichel AdonaiVera AdonaiVera AAtomical AAtomical
Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125... Moderate Unreviewed
CVE-2026-15768 was published Jul 14, 2026
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote... Moderate Unreviewed
CVE-2026-15775 was published Jul 14, 2026
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized... High Unreviewed
CVE-2026-56181 was published Jul 14, 2026
In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession... High Unreviewed
CVE-2026-15076 was published Jul 14, 2026
SiYuan: Unauthenticated Admin API Access via Blanket chrome-extension:// Origin Allowlist Critical
CVE-2026-54069 was published for github.com/siyuan-note/siyuan/kernel (Go) Jul 10, 2026
oduoke567 Credited to oduoke567
Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing Moderate
CVE-2026-55438 was published for github.com/coder/coder/v2 (Go) Jul 6, 2026
Dapr Sentry's OIDC discovery endpoint derives the issuer and jwks_uri of the /.well-known/openid... High Unreviewed
CVE-2026-59096 was published Jul 2, 2026
Flowise before 3.1.2 sets Access-Control-Allow-Origin to a hardcoded wildcard (*) on its text-to... Moderate Unreviewed
CVE-2026-56277 was published Jul 1, 2026
Insufficient policy enforcement in Speech in Google Chrome prior to 150.0.7871.47 allowed a... Critical Unreviewed
CVE-2026-14105 was published Jul 1, 2026
Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed a... Moderate Unreviewed
CVE-2026-14079 was published Jul 1, 2026
Inappropriate implementation in FedCM in Google Chrome prior to 150.0.7871.47 allowed a remote... Moderate Unreviewed
CVE-2026-14057 was published Jul 1, 2026
Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a... Moderate Unreviewed
CVE-2026-14053 was published Jul 1, 2026
Insufficient policy enforcement in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a... Moderate Unreviewed
CVE-2026-14039 was published Jul 1, 2026
Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 150.0.7871.47... Moderate Unreviewed
CVE-2026-14046 was published Jul 1, 2026
Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 150.0.7871.47... Moderate Unreviewed
CVE-2026-13913 was published Jul 1, 2026
Inappropriate implementation in NFC in Google Chrome on Android prior to 150.0.7871.47 allowed a... Moderate Unreviewed
CVE-2026-13887 was published Jul 1, 2026
Inappropriate implementation in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a... Moderate Unreviewed
CVE-2026-13881 was published Jul 1, 2026
Inappropriate implementation in Network in Google Chrome on Android prior to 150.0.7871.47... Moderate Unreviewed
CVE-2026-13868 was published Jul 1, 2026
Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote... Moderate Unreviewed
CVE-2026-13839 was published Jul 1, 2026
Insufficient policy enforcement in Canvas in Google Chrome prior to 150.0.7871.47 allowed a... Moderate Unreviewed
CVE-2026-13840 was published Jul 1, 2026
Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote... Moderate Unreviewed
CVE-2026-13838 was published Jul 1, 2026
Inappropriate implementation in Extensions in Google Chrome on Android prior to 150.0.7871.47... Moderate Unreviewed
CVE-2026-13822 was published Jul 1, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database