Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,143
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,555
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

451 advisories

Loading
Uninitialized resource in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker... Moderate Unreviewed
CVE-2026-79221 was published Aug 25, 2026
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker... Moderate Unreviewed
CVE-2026-79229 was published Aug 25, 2026
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker... Moderate Unreviewed
CVE-2026-79118 was published Aug 25, 2026
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker... Moderate Unreviewed
CVE-2026-79120 was published Aug 25, 2026
Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a... Moderate Unreviewed
CVE-2026-79040 was published Aug 25, 2026
Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a... Moderate Unreviewed
CVE-2026-78977 was published Aug 25, 2026
Uninitialized resource in Video in Google Chrome prior to 152.0.7977.65 allowed a remote attacker... Moderate Unreviewed
CVE-2026-78969 was published Aug 25, 2026
Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker... Moderate Unreviewed
CVE-2026-78962 was published Aug 25, 2026
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker... Moderate Unreviewed
CVE-2026-78965 was published Aug 25, 2026
Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker... Moderate Unreviewed
CVE-2026-78914 was published Aug 25, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in... Moderate Unreviewed
CVE-2026-19448 was published Aug 21, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of... Moderate Unreviewed
CVE-2026-16827 was published Aug 19, 2026
To retrieve the previous timer value, the kernel calls realtimer_gettime(), which obtains the... Moderate Unreviewed
CVE-2026-58084 was published Aug 19, 2026
The compat32 kevent() handler translates a 64-bit kevent struct into a stack- declared 32-bit... Moderate Unreviewed
CVE-2026-49425 was published Aug 19, 2026
The Linux waitid() implementation translates a FreeBSD siginfo_t struct into a stack-declared... Moderate Unreviewed
CVE-2026-49424 was published Aug 19, 2026
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose... Moderate Unreviewed
CVE-2026-70317 was published Aug 11, 2026
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to... Moderate Unreviewed
CVE-2026-68799 was published Aug 11, 2026
Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to... Moderate Unreviewed
CVE-2026-62740 was published Aug 11, 2026
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose... Moderate Unreviewed
CVE-2026-62709 was published Aug 11, 2026
Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to... Moderate Unreviewed
CVE-2026-59136 was published Aug 11, 2026
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to... Moderate Unreviewed
CVE-2026-59137 was published Aug 11, 2026
SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an... Moderate Unreviewed
CVE-2026-58247 was published Aug 11, 2026
FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read... Moderate Unreviewed
CVE-2026-70630 was published Aug 7, 2026
FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read... Moderate Unreviewed
CVE-2026-70629 was published Aug 7, 2026
FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory... Moderate Unreviewed
CVE-2026-70631 was published Aug 7, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database