Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
41
Go
3,026
Maven
5,000+
npm
4,763
NuGet
824
pip
4,366
Pub
12
RubyGems
987
Rust
1,143
Swift
50
Unreviewed advisories
All unreviewed
5,000+

3,308 advisories

Loading
A vulnerability has been found in gmg137 snap7-rs up to 1.142.1. Affected is the function... Moderate Unreviewed
CVE-2025-14673 was published Dec 14, 2025
A flaw has been found in gmg137 snap7-rs up to 1.142.1. This impacts the function... Moderate Unreviewed
CVE-2025-14672 was published Dec 14, 2025
A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function... Moderate Unreviewed
CVE-2025-14607 was published Dec 13, 2025
A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function... Moderate Unreviewed
CVE-2025-14569 was published Dec 12, 2025
A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Impacted is the function... Moderate Unreviewed
CVE-2025-14139 was published Dec 6, 2025
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980,... Moderate Unreviewed
CVE-2025-53965 was published Dec 3, 2025
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause... Moderate Unreviewed
CVE-2025-33195 was published Nov 25, 2025
A security vulnerability has been detected in jarun nnn up to 5.1. The impacted element is the... Moderate Unreviewed
CVE-2025-13566 was published Nov 23, 2025
A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function... Moderate Unreviewed
CVE-2025-13120 was published Nov 13, 2025
A weakness has been identified in mruby 3.4.0. This vulnerability affects the function... Moderate Unreviewed
CVE-2025-12875 was published Nov 7, 2025
A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This... Moderate Unreviewed
CVE-2025-12745 was published Nov 5, 2025
A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1.... Moderate Unreviewed
CVE-2025-43504 was published Nov 4, 2025
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS... Moderate Unreviewed
CVE-2025-43441 was published Nov 4, 2025
A buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1... Moderate Unreviewed
CVE-2025-43429 was published Nov 4, 2025
The issue was addressed with improved memory handling. This issue is fixed in watchOS 26.1, iOS... Moderate Unreviewed
CVE-2025-43447 was published Nov 4, 2025
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1,... Moderate Unreviewed
CVE-2025-43425 was published Nov 4, 2025
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1,... Moderate Unreviewed
CVE-2025-43435 was published Nov 4, 2025
The issue was addressed with improved memory handling. This issue is fixed in visionOS 26.1,... Moderate Unreviewed
CVE-2025-43398 was published Nov 4, 2025
ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS) Moderate
CVE-2025-62594 was published for Magick.NET-Q16-HDRI-OpenMP-arm64 (NuGet) Oct 27, 2025
amethyst0225 jin-156
hanbunny yosiimich
Credited to amethyst0225, jin-156, hanbunny, and yosiimich
A security vulnerability has been detected in Kamailio 5.5. Impacted is the function rve_destroy... Moderate Unreviewed
CVE-2025-12204 was published Oct 27, 2025
A vulnerability was detected in Kamailio 5.5. The affected element is the function... Moderate Unreviewed
CVE-2025-12205 was published Oct 27, 2025
A security vulnerability has been detected in DCMTK up to 3.6.5. The affected element is the... Moderate Unreviewed
CVE-2020-36855 was published Oct 21, 2025
A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo... Moderate Unreviewed
CVE-2025-11840 was published Oct 16, 2025
YAML::Syck versions before 1.36 for Perl has missing null-terminators which causes out-of-bounds... Moderate Unreviewed
CVE-2025-11683 was published Oct 16, 2025
APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of... Moderate Unreviewed
CVE-2025-33044 was published Oct 14, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database