Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

419 advisories

Loading
MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified) Moderate
GHSA-473q-m89c-ghf8 was published for MySqlConnector (NuGet) Oct 28, 2026
rusher Credited to rusher
MessagePack: Nested arrays can blow past buffer length limits Moderate
CVE-2026-92707 was published for MessagePack (NuGet) Oct 15, 2026
AArnott Credited to AArnott
Metalama allows local code execution through DLL planting in shared temporary directories Moderate
CVE-2026-62847 was published for Metalama.Framework (NuGet) Oct 14, 2026
Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure Vulnerability Moderate
CVE-2026-96234 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure Vulnerability Moderate
CVE-2026-96229 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerability Moderate
CVE-2026-85790 was published for Microsoft.Native.Quic.MsQuic.Schannel (NuGet) Oct 13, 2026
rbhanda Credited to rbhanda
Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability Moderate
CVE-2026-66822 was published for Microsoft.NETCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability Moderate
GHSA-86xp-94pg-8r6r was published for Microsoft.AspNetCore.SignalR.Protocols.MessagePack (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability Moderate
CVE-2026-70162 was published for System.Security.Cryptography.Pkcs (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability Moderate
CVE-2026-70194 was published for Microsoft.NETCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability Moderate
CVE-2026-70196 was published for Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate Moderate
CVE-2026-106111 was published for SixLabors.ImageSharp (NuGet) Oct 7, 2026
MegaManSec Credited to MegaManSec
ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop Moderate
CVE-2026-106116 was published for SixLabors.ImageSharp (NuGet) Oct 7, 2026
MegaManSec Credited to MegaManSec and JimBobSquarePants JimBobSquarePants JimBobSquarePants
ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions Moderate
CVE-2026-106114 was published for SixLabors.ImageSharp (NuGet) Oct 7, 2026
MegaManSec Credited to MegaManSec and JimBobSquarePants JimBobSquarePants JimBobSquarePants
MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers Moderate
CVE-2026-65829 was published for MPXJ.Net (RubyGems) Sep 22, 2026
czTangt Credited to czTangt
Steeltoe: Header-forwarded client cert lacks proof of private-key possession Moderate
CVE-2026-81868 was published for Steeltoe.Security.Authorization.Certificate (NuGet) Sep 17, 2026
Steeltoe.Management.Endpoint: HttpExchanges URI masking leaks query-string secrets Moderate
CVE-2026-75523 was published for Steeltoe.Management.Endpoint (NuGet) Sep 17, 2026
manus-use Credited to manus-use
Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Moderate
CVE-2026-69304 was published for Microsoft.AspNetCore.Server.IISIntegration (NuGet) Sep 9, 2026
Microsoft Security Advisory CVE-2026-62900 – .NET Information Disclosure Vulnerability Moderate
CVE-2026-62900 was published for Microsoft.Build.Tasks.Git (NuGet) Sep 8, 2026
Duplicate Advisory: Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Moderate
GHSA-v3f6-m9j2-437p was published for Microsoft.AspNetCore.Server.IISIntegration (NuGet) Sep 8, 2026 • withdrawn
Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability Moderate
CVE-2026-62902 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Aug 11, 2026
Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability Moderate
CVE-2026-62909 was published for Microsoft.NETCore.App.Runtime.linux-arm (NuGet) Aug 11, 2026
Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability Moderate
CVE-2026-62899 was published for Microsoft.NETCore.App.Runtime.linux-arm (NuGet) Aug 11, 2026
ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow Moderate
CVE-2026-53466 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 31, 2026
Bin-infinite Credited to Bin-infinite
ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds Moderate
CVE-2026-62946 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
kongzhenhit-code Credited to kongzhenhit-code
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database