Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

192 advisories

Loading
An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5... Low Unreviewed
CVE-2026-107590 was published Oct 27, 2026
libphdi through 20260902 contains a heap out-of-bounds read vulnerability in... Moderate Unreviewed
CVE-2026-116737 was published Oct 27, 2026
Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function... High Unreviewed
CVE-2020-37287 was published Oct 21, 2026
libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mng_read_ordr() that... Moderate Unreviewed
CVE-2026-112008 was published Oct 18, 2026
A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead... High Unreviewed
CVE-2026-86563 was published Oct 14, 2026
An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of... High Unreviewed
CVE-2026-102027 was published Oct 14, 2026
Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template... Moderate Unreviewed
CVE-2026-104424 was published Oct 2, 2026
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an... High Unreviewed
CVE-2026-47578 was published Sep 30, 2026
`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it... Moderate Unreviewed
CVE-2026-102729 was published Sep 29, 2026
An incorrect buffer size calculation vulnerability exists in tinyexpr commit 4a7456e in new_expr(... High Unreviewed
CVE-2026-88355 was published Sep 24, 2026
Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on HPS allows... High Unreviewed
CVE-2026-13466 was published Sep 24, 2026
A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre... High Unreviewed
CVE-2026-88830 was published Sep 23, 2026
FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing... Moderate Unreviewed
CVE-2026-91962 was published Sep 15, 2026
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute... High Unreviewed
CVE-2026-69598 was published Sep 8, 2026
An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1... Moderate Unreviewed
CVE-2026-78221 was published Sep 7, 2026
A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted... Low Unreviewed
CVE-2026-18743 was published Sep 1, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of... High Unreviewed
CVE-2026-16924 was published Aug 20, 2026
In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix size... High Unreviewed
CVE-2026-68287 was published Aug 10, 2026
A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file... High Unreviewed
CVE-2026-42170 was published Aug 8, 2026
A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This... High Unreviewed
CVE-2026-42169 was published Aug 4, 2026
Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy... Moderate Unreviewed
CVE-2026-45812 was published Jul 24, 2026
FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect... High Unreviewed
CVE-2026-65706 was published Jul 23, 2026
FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the... High Unreviewed
CVE-2026-65705 was published Jul 23, 2026
Ruby json: JSON generator heap buffer overflow when streaming to an IO Low
CVE-2026-54696 was published for json (RubyGems) Jul 23, 2026
susdrip Credited to susdrip
In the Linux kernel, the following vulnerability has been resolved: drm/msm/snapshot: fix... High Unreviewed
CVE-2026-64039 was published Jul 19, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database