Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,620
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

1,920 advisories

Loading
MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure High
CVE-2026-114613 was published for msgpack (pip) Oct 27, 2026
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command... Low Unreviewed
CVE-2026-116158 was published Oct 25, 2026
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of... Moderate Unreviewed
CVE-2026-116159 was published Oct 25, 2026
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free... Moderate Unreviewed
CVE-2026-116157 was published Oct 25, 2026
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of... Moderate Unreviewed
CVE-2026-116155 was published Oct 25, 2026
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing... Moderate Unreviewed
CVE-2026-116154 was published Oct 25, 2026
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing... Moderate Unreviewed
CVE-2026-116156 was published Oct 25, 2026
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the MSL decoder... Moderate Unreviewed
CVE-2026-116146 was published Oct 25, 2026
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the FPX encoder that allows... Low Unreviewed
CVE-2026-116150 was published Oct 25, 2026
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the JNG encoder... Moderate Unreviewed
CVE-2026-116151 was published Oct 25, 2026
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the MAT decoder that fails to... Moderate Unreviewed
CVE-2026-116152 was published Oct 25, 2026
Multiple Cisco products are affected by a vulnerability in the memory management implementation... Moderate Unreviewed
CVE-2026-76489 was published Oct 21, 2026
Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when... Critical Unreviewed
CVE-2026-110685 was published Oct 19, 2026
Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key... High Unreviewed
CVE-2026-110677 was published Oct 19, 2026
Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded... High Unreviewed
CVE-2026-110684 was published Oct 19, 2026
Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a... High Unreviewed
CVE-2026-110672 was published Oct 19, 2026
Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse... Moderate Unreviewed
CVE-2026-110754 was published Oct 17, 2026
A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding... High Unreviewed
CVE-2026-102081 was published Oct 14, 2026
An Improper Release of Memory Before Removing Last Reference vulnerability in the l2cpd process... High Unreviewed
CVE-2026-102051 was published Oct 14, 2026
An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process... Moderate Unreviewed
CVE-2026-102053 was published Oct 14, 2026
A Missing Release of Memory after Effective Lifetime vulnerability in the l2ald process of... High Unreviewed
CVE-2026-102032 was published Oct 14, 2026
Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a... Moderate Unreviewed
CVE-2026-101025 was published Oct 14, 2026
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized... High Unreviewed
CVE-2026-83677 was published Oct 13, 2026
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker... High Unreviewed
CVE-2026-70155 was published Oct 13, 2026
Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an... High Unreviewed
CVE-2026-70033 was published Oct 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database