Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

166 advisories

Loading
Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests Moderate
CVE-2026-118263 was published for github.com/labstack/echo/v5 (Go) Oct 23, 2026
Duodum Credited to Duodum
Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package Critical
CVE-2026-111497 was published for brotli (pip) Oct 22, 2026
HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service ... High Unreviewed
CVE-2026-110353 was published Oct 22, 2026
The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A... Critical Unreviewed
CVE-2026-56388 was published Oct 21, 2026
Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate... High Unreviewed
CVE-2026-77207 was published Oct 14, 2026
Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared... Moderate Unreviewed
CVE-2026-107785 was published Oct 9, 2026
Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local... Low Unreviewed
CVE-2026-95316 was published Sep 29, 2026
undici vulnerable to Denial of Service via unrequested WebSocket subprotocol High
CVE-2026-19534 was published for undici (npm) Sep 29, 2026
manus-use Credited to manus-use, mcollina, and UlisesGascon mcollina mcollina
UlisesGascon UlisesGascon
In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse... Moderate Unreviewed
CVE-2026-98141 was published Sep 25, 2026
In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL... Moderate Unreviewed
CVE-2026-98114 was published Sep 25, 2026
Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value... High Unreviewed
CVE-2026-71180 was published Sep 16, 2026
wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily... High Unreviewed
CVE-2026-90648 was published Sep 13, 2026
Snipe-IT versions <= 8.6.3 (fixed in 8.7.0) do not check the return value of storage write... High Unreviewed
CVE-2026-86749 was published Sep 9, 2026
Snipe-IT 8.6.3 and earlier do not check the return value of Storage::put() when writing the... Low Unreviewed
CVE-2026-86739 was published Sep 9, 2026
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a... Low Unreviewed
CVE-2026-86141 was published Sep 5, 2026
In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts... High Unreviewed
CVE-2026-14957 was published Sep 2, 2026
Duplicate Advisory: Nokogiri does not check the return value from xmlC14NExecute Moderate
GHSA-xqqh-3w52-q8p7 was published for nokogiri (RubyGems) Aug 25, 2026 • withdrawn
tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails.... Moderate Unreviewed
CVE-2026-77641 was published Aug 20, 2026
Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability Moderate
CVE-2026-62909 was published for Microsoft.NETCore.App.Runtime.linux-arm (NuGet) Aug 11, 2026
ImageMagick: Heap-use-after-free via XMP profile could result in a crash Low
GHSA-qh5g-q395-cx4j was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because... Low Unreviewed
CVE-2026-26080 was published Jul 20, 2026
In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix error return... Moderate Unreviewed
CVE-2026-64040 was published Jul 19, 2026
ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null... Moderate Unreviewed
CVE-2026-61857 was published Jul 11, 2026
chmod: recursive mode returns exit code 0 even when some files fail (last-file-wins) Moderate
CVE-2026-35339 was published for uu_chmod (Rust) Jul 6, 2026
When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile... High Unreviewed
CVE-2026-11972 was published Jun 24, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database