Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,620
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

1,188 advisories

Loading
MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified) Moderate
GHSA-473q-m89c-ghf8 was published for MySqlConnector (NuGet) Oct 28, 2026
rusher Credited to rusher
TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization High
CVE-2026-116675 was published for TinyMCE (Composer) Oct 27, 2026
farisv Credited to farisv and secalert secalert secalert
ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write High
CVE-2026-106118 was published for SixLabors.ImageSharp (NuGet) Oct 7, 2026
KimiSecurityTeam Credited to KimiSecurityTeam, nazeeh111, and JimBobSquarePants nazeeh111 nazeeh111
JimBobSquarePants JimBobSquarePants
ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer High
CVE-2026-106110 was published for SixLabors.ImageSharp (NuGet) Oct 7, 2026
MegaManSec Credited to MegaManSec and JimBobSquarePants JimBobSquarePants JimBobSquarePants
ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer High
CVE-2026-106115 was published for SixLabors.ImageSharp (NuGet) Oct 7, 2026
MegaManSec Credited to MegaManSec and JimBobSquarePants JimBobSquarePants JimBobSquarePants
ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop Moderate
CVE-2026-106116 was published for SixLabors.ImageSharp (NuGet) Oct 7, 2026
MegaManSec Credited to MegaManSec and JimBobSquarePants JimBobSquarePants JimBobSquarePants
ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index High
CVE-2026-106113 was published for SixLabors.ImageSharp (NuGet) Oct 7, 2026
MegaManSec Credited to MegaManSec and JimBobSquarePants JimBobSquarePants JimBobSquarePants
ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions Moderate
CVE-2026-106114 was published for SixLabors.ImageSharp (NuGet) Oct 7, 2026
MegaManSec Credited to MegaManSec and JimBobSquarePants JimBobSquarePants JimBobSquarePants
Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates Moderate
CVE-2025-49015 was published for CouchbaseNetClient (NuGet) Jun 18, 2025
Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability High
CVE-2026-70186 was published for Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-70035 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-70007 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-87697 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-70197 was published for Microsoft.NETCore.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability High
CVE-2026-69651 was published for Microsoft.NETCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability High
CVE-2026-96230 was published for Microsoft.AspNetCore.Components.WebAssembly.Server (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability High
CVE-2026-96236 was published for Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability High
CVE-2026-102870 was published for Microsoft.AspNetCore.Components.WebAssembly.Server (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege Vulnerability High
CVE-2026-70179 was published for Microsoft.AspNetCore.Authentication.Negotiate (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability Critical
CVE-2026-88092 was published for Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-96224 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability Moderate
CVE-2026-66822 was published for Microsoft.NETCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability High
CVE-2026-96959 was published for System.Security.Cryptography.Xml (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-70174 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-83520 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database