Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,569
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,522
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

382 advisories

Loading
In the Linux kernel, the following vulnerability has been resolved: xfs: delete attr leaf... High Unreviewed
CVE-2026-43187 was published May 6, 2026
GoBGP has an Integer Underflow Issue Moderate
CVE-2026-7736 was published for github.com/osrg/gobgp/v4 (Go) May 4, 2026
MsQuic has a Remote Elevation of Privilege Vulnerability Critical
CVE-2026-32179 was published for Microsoft.Native.Quic.MsQuic.OpenSSL (NuGet) Apr 16, 2026
strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP... High Unreviewed
CVE-2026-25075 was published Mar 23, 2026
Integer underflow vulnerability in Open-SAE-J1939 thru commit... Critical Unreviewed
CVE-2026-37534 was published May 1, 2026
Integer underflow in wolfSSL packet sniffer <= 5.8.4 allows an attacker to cause a buffer... Low Unreviewed
CVE-2026-1005 was published Mar 19, 2026
Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of... High Unreviewed
CVE-2026-6914 was published Apr 29, 2026
An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name (SAN)... Low Unreviewed
CVE-2026-5188 was published Apr 10, 2026
Integer underflow in wolfSSL packet sniffer <= 5.9.0 allows an attacker to cause a program crash... Low Unreviewed
CVE-2026-5778 was published Apr 10, 2026
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of... Moderate Unreviewed
CVE-2026-40356 was published Apr 28, 2026
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix... Moderate Unreviewed
CVE-2026-31551 was published Apr 24, 2026
In the Linux kernel, the following vulnerability has been resolved: tipc: fix bc_ackers... High Unreviewed
CVE-2026-31662 was published Apr 24, 2026
nimiq-account: Vesting insufficient funds error can panic Moderate
CVE-2026-34064 was published for nimiq-account (Rust) Apr 22, 2026
1seal Credited to 1seal and paberr paberr paberr
ImageMagick has a heap-Buffer-Overflow write of a single zero byte when parsing xml. Moderate
CVE-2026-33899 was published for Magick.NET-Q16-AnyCPU (NuGet) Apr 13, 2026
unbengable12 Credited to unbengable12
Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or... High Unreviewed
CVE-2026-27296 was published Apr 15, 2026
Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or... High Unreviewed
CVE-2026-27297 was published Apr 15, 2026
Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized... High Unreviewed
CVE-2026-27907 was published Apr 14, 2026
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote... Moderate Unreviewed
CVE-2026-40386 was published Apr 12, 2026
go-git: Maliciously crafted idx file can cause asymmetric memory consumption Moderate
CVE-2026-34165 was published for github.com/go-git/go-git/v5 (Go) Mar 30, 2026
kq5y Credited to kq5y
An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig... Critical Unreviewed
CVE-2024-23313 was published Feb 20, 2024
A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content... Moderate Unreviewed
CVE-2026-2369 was published Mar 19, 2026
libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value... High Unreviewed
CVE-2026-32775 was published Mar 16, 2026
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential... Moderate Unreviewed
CVE-2026-23069 was published Feb 4, 2026
Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to... High Unreviewed
CVE-2026-3538 was published Mar 4, 2026
A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric... Moderate Unreviewed
CVE-2025-48021 was published Feb 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database