Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,583
Rust
21

325 advisories

Loading
An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart... Low Unreviewed
CVE-2026-103394 was published Oct 28, 2026
A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. This impacts an... Low Unreviewed
CVE-2026-116115 was published Oct 26, 2026
An Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks... High Unreviewed
CVE-2026-101957 was published Oct 14, 2026
Improper initialization in an ASUS certain motherboard allows an physically proximate user to... High Unreviewed
CVE-2026-93495 was published Oct 1, 2026
Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a... High Unreviewed
CVE-2026-87616 was published Sep 9, 2026
Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote... Moderate Unreviewed
CVE-2026-78940 was published Aug 25, 2026
In the Linux kernel, the following vulnerability has been resolved: device property: initialize... High Unreviewed
CVE-2026-68461 was published Aug 15, 2026
Improper initialization in some firmware for some Intel(R) Active Management Technology (Intel(R)... Moderate Unreviewed
CVE-2026-20734 was published Aug 11, 2026
Parts of the DM_OP handling code assumes the caller has provided the required number of buffers... High Unreviewed
CVE-2026-62433 was published Jul 28, 2026
A memory initialization issue was addressed with improved memory handling. This issue is fixed in... Critical Unreviewed
CVE-2026-64775 was published Jul 27, 2026
In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit... High Unreviewed
CVE-2026-64368 was published Jul 25, 2026
In the Linux kernel, the following vulnerability has been resolved: igc: set tx buffer type for... Critical Unreviewed
CVE-2026-64035 was published Jul 19, 2026
In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME... Critical Unreviewed
CVE-2026-53398 was published Jul 19, 2026
A malicious actor with access to the network and under certain conditions could exploit an... High Unreviewed
CVE-2026-54409 was published Jul 2, 2026
CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance Moderate
CVE-2026-54777 was published for CoreWCF.NetNamedPipe (NuGet) Jun 19, 2026
Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at network-creation... Moderate Unreviewed
CVE-2026-12539 was published Jun 18, 2026
DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch) Moderate
CVE-2026-65898 was published for dompurify (npm) Jun 18, 2026
trace37labs Credited to trace37labs and EchoTydes EchoTydes EchoTydes
aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence Low
CVE-2026-54279 was published for aiohttp (pip) Jun 15, 2026
denyspakizh-tob Credited to denyspakizh-tob and bdraco bdraco bdraco
Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal... Moderate Unreviewed
CVE-2025-35991 was published May 12, 2026
In the Linux kernel, the following vulnerability has been resolved: cifs: some missing... High Unreviewed
CVE-2026-31693 was published Apr 30, 2026
Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out) High
GHSA-f5v8-v6q3-q4h6 was published for Meridian.Mapping (NuGet) Apr 16, 2026
In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: fix wrong... High Unreviewed
CVE-2026-23253 was published Mar 18, 2026
A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that... High Unreviewed
CVE-2026-0940 was published Mar 11, 2026
An issue was discovered in LBS in Samsung Mobile Processor Exynos 2200. There was no check for... High Unreviewed
CVE-2025-66363 was published Mar 3, 2026
filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identity Low
CVE-2026-26958 was published for filippo.io/edwards25519 (Go) Feb 18, 2026
WeebDataHoarder Credited to WeebDataHoarder and shaharcohen1 shaharcohen1 shaharcohen1
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database