Skip to content

Latest Newest CVEs from every source Exploited in the wild CISA KEV + ENISA exploited Critical CVSS 9.0 and above Vendors & products Browse by vendor

Browse

Weekly digest The week in one page Weaknesses (CWE) XSS, SQL injection, path traversal… Archive By year, month and day

Catalogues

CISA KEV Known Exploited Vulnerabilities ENISA EUVD EU Vulnerability Database

National CERTs & open source

BSI CERT-Bund German federal CERT (WID) Open source (OSV) GitHub, PyPA, Go, RustSec…

Linux distributions

Debian DSA / DLA Ubuntu USN Red Hat RHSA SUSE / openSUSE SUSE-SU Rocky Linux RLSA AlmaLinux ALSA

Check a version Is my package version vulnerable? Scan a lockfile package-lock, composer.lock, go.sum… Scan a server Installed packages on Linux and containers Daily notifications One push a day — no e-mail, no account

About What this is and who runs it Data sources Licenses and live update status Methodology Scoring, merging, version matching Contact Corrections and feedback

For developers

Guide Servers, lockfiles, CI, feeds API & feeds JSON endpoints, Atom feeds

Search vulnerabilities

Search vulnerabilities

Vulnerabilities

Latest
Exploited in the wild
Critical
Vendors & products

Browse

Weekly digest
Weaknesses (CWE)
Archive

Catalogues

CISA KEV
ENISA EUVD

Advisories

National CERTs & open source

BSI CERT-Bund
Open source (OSV)

Linux distributions

Debian
Ubuntu
Red Hat
SUSE / openSUSE
Rocky Linux
AlmaLinux

Tools

Check a version
Scan a lockfile
Scan a server
Daily notifications

Malware

Malicious packages

Resources

About
Data sources
Methodology
Contact

For developers

Guide
API & feeds

Package · GitHub Actions

github/codeql-action

1 known vulnerabilities.

Search

Check a version of github/codeql-action

All Critical High Medium Low Exploited only

0 results · Clear filters · Feed

Nothing found.

Security advisories from CVE, CISA, ENISA, BSI, Linux distributions and open-source ecosystems — aggregated hourly, free and without tracking.

A service by Aurelius Julian Ballweber — ballweber.org

Vulnerabilities

Latest
Exploited in the wild
Critical
Vendors & products
Weekly digest
Weaknesses (CWE)
Archive
CISA KEV
ENISA EUVD

Advisories

BSI CERT-Bund
Open source (OSV)
Debian
Ubuntu
Red Hat
SUSE / openSUSE
Rocky Linux
AlmaLinux

Tools

Check a version
Scan a lockfile
Scan a server
Daily notifications
Malicious packages

Resources

About
Data sources
Methodology
Guide
API & feeds

© 2026 OpenAdvisories. Data as published by its sources — always verify with the vendor advisory.

Legal notice
Privacy
Terms of use
Contact

CVE® is a registered trademark of The MITRE Corporation. Data: CVE Program, CISA KEV, FIRST EPSS, ENISA EUVD, BSI CERT-Bund, OSV.dev and Linux distributions — all sources.