Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,620
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

419 advisories

Loading
MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified) Moderate
GHSA-473q-m89c-ghf8 was published for MySqlConnector (NuGet) Oct 28, 2026
rusher Credited to rusher
ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop Moderate
CVE-2026-106116 was published for SixLabors.ImageSharp (NuGet) Oct 7, 2026
MegaManSec Credited to MegaManSec and JimBobSquarePants JimBobSquarePants JimBobSquarePants
ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions Moderate
CVE-2026-106114 was published for SixLabors.ImageSharp (NuGet) Oct 7, 2026
MegaManSec Credited to MegaManSec and JimBobSquarePants JimBobSquarePants JimBobSquarePants
Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates Moderate
CVE-2025-49015 was published for CouchbaseNetClient (NuGet) Jun 18, 2025
Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability Moderate
CVE-2026-66822 was published for Microsoft.NETCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure Vulnerability Moderate
CVE-2026-96234 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure Vulnerability Moderate
CVE-2026-96229 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability Moderate
CVE-2026-70162 was published for System.Security.Cryptography.Pkcs (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability Moderate
CVE-2026-70194 was published for Microsoft.NETCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability Moderate
CVE-2026-70196 was published for Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerability Moderate
CVE-2026-85790 was published for Microsoft.Native.Quic.MsQuic.Schannel (NuGet) Oct 13, 2026
rbhanda Credited to rbhanda
MessagePack: Nested arrays can blow past buffer length limits Moderate
CVE-2026-92707 was published for MessagePack (NuGet) Oct 15, 2026
AArnott Credited to AArnott
Metalama allows local code execution through DLL planting in shared temporary directories Moderate
CVE-2026-62847 was published for Metalama.Framework (NuGet) Oct 14, 2026
Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability Moderate
GHSA-86xp-94pg-8r6r was published for Microsoft.AspNetCore.SignalR.Protocols.MessagePack (NuGet) Oct 13, 2026
ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate Moderate
CVE-2026-106111 was published for SixLabors.ImageSharp (NuGet) Oct 7, 2026
MegaManSec Credited to MegaManSec
Duplicate Advisory: ImageMagick has a possible heap Use After Free vulnerability in its meta coder Moderate
GHSA-8g9f-ccmr-vfvg was published for Magick.NET-Q16-AnyCPU (NuGet) Jun 23, 2026 • withdrawn
MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers Moderate
CVE-2026-65829 was published for MPXJ.Net (RubyGems) Sep 22, 2026
czTangt Credited to czTangt
Steeltoe: Header-forwarded client cert lacks proof of private-key possession Moderate
CVE-2026-81868 was published for Steeltoe.Security.Authorization.Certificate (NuGet) Sep 17, 2026
Steeltoe.Management.Endpoint: HttpExchanges URI masking leaks query-string secrets Moderate
CVE-2026-75523 was published for Steeltoe.Management.Endpoint (NuGet) Sep 17, 2026
manus-use Credited to manus-use
Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Moderate
CVE-2026-69304 was published for Microsoft.AspNetCore.Server.IISIntegration (NuGet) Sep 9, 2026
Duplicate Advisory: Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Moderate
GHSA-v3f6-m9j2-437p was published for Microsoft.AspNetCore.Server.IISIntegration (NuGet) Sep 8, 2026 • withdrawn
Microsoft Security Advisory CVE-2026-62900 – .NET Information Disclosure Vulnerability Moderate
CVE-2026-62900 was published for Microsoft.Build.Tasks.Git (NuGet) Sep 8, 2026
ImageMagick: Memory Leak in multiple coders that write raw pixel data Moderate
CVE-2026-56368 was published for Magick.NET-Q16-AnyCPU (NuGet) Feb 25, 2026
ylwango613 Credited to ylwango613
Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass) Moderate
CVE-2026-73851 was published for Microsoft.OpenApi.Kiota (NuGet) Jul 24, 2026
gavinbarron Credited to gavinbarron, gn00295120, and BarakSrour gn00295120 gn00295120
BarakSrour BarakSrour
Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability Moderate
CVE-2026-62902 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Aug 11, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database