Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,581
Rust
21

11 advisories

Loading
The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A... Critical Unreviewed
CVE-2026-56388 was published Oct 21, 2026
Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package Critical
CVE-2026-111497 was published for brotli (pip) Oct 22, 2026
manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the... Critical Unreviewed
CVE-1999-0199 was published Apr 21, 2022
An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On... Critical Unreviewed
CVE-2019-15900 was published May 24, 2022
Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values Critical
CVE-2025-66565 was published for github.com/gofiber/utils (Go) Dec 8, 2025
sixcolors Credited to sixcolors
Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This... Critical Unreviewed
CVE-2024-50306 was published Nov 14, 2024
Cryptographic issue in WLAN due to improper check on return value while authentication handshake... Critical Unreviewed
CVE-2022-25718 was published Oct 19, 2022
adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits... Critical Unreviewed
CVE-2021-38171 was published May 24, 2022
Unchecked Return Value in xcb Critical
CVE-2021-26955 was published for xcb (Rust) Aug 25, 2021
amousset Credited to amousset
Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly... Critical Unreviewed
CVE-2022-23806 was published Feb 12, 2022
A vulnerability, which was classified as problematic, has been found in vicamo NetworkManager.... Critical Unreviewed
CVE-2014-125043 was published Jan 5, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database