Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,521
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,514
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

170 advisories

Loading
A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file... High Unreviewed
CVE-2026-42170 was published Aug 8, 2026
A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This... High Unreviewed
CVE-2026-42169 was published Aug 4, 2026
Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy... Moderate Unreviewed
CVE-2026-45812 was published Jul 24, 2026
FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect... High Unreviewed
CVE-2026-65706 was published Jul 23, 2026
FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the... High Unreviewed
CVE-2026-65705 was published Jul 23, 2026
Ruby json: JSON generator heap buffer overflow when streaming to an IO Low
CVE-2026-54696 was published for json (RubyGems) Jul 23, 2026
susdrip Credited to susdrip
An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software... Low Unreviewed
CVE-2026-0280 was published Jul 9, 2026
jxl-grid on 32-bit platforms has an out-of-bounds writes due to integer overflow High
CVE-2026-52834 was published for jxl-grid (Rust) Jul 2, 2026
jxl-oxide: `FrameBuffer::new` creates out-of-bounds slices on overflow Moderate
GHSA-66m8-c62j-h6v5 was published for jxl-oxide (Rust) Jul 2, 2026
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix buffer... High Unreviewed
CVE-2026-53143 was published Jun 25, 2026
GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2026-2050 was published Jun 25, 2026
In the Linux kernel, the following vulnerability has been resolved: net: pull headers in... High Unreviewed
CVE-2026-53091 was published Jun 24, 2026
In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out... Critical Unreviewed
CVE-2026-52955 was published Jun 24, 2026
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and... Critical Unreviewed
CVE-2026-42055 was published Jun 17, 2026
LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow... Moderate Unreviewed
CVE-2026-8357 was published Jun 15, 2026
GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2026-2049 was published Jun 11, 2026
Incorrect calculation of buffer size in Windows TCP/IP allows an authorized attacker to deny... Moderate Unreviewed
CVE-2026-42915 was published Jun 9, 2026
Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in... High Unreviewed
CVE-2026-10701 was published Jun 2, 2026
In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len... Critical Unreviewed
CVE-2026-43501 was published May 21, 2026
rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers Moderate
CVE-2026-45784 was published for openssl (Rust) May 19, 2026
thesmartshadow Credited to thesmartshadow
ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression Moderate
CVE-2026-46521 was published for Magick.NET-Q16-AnyCPU (NuGet) May 18, 2026
sharadboni Credited to sharadboni
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This... Critical Unreviewed
CVE-2026-42945 was published May 13, 2026
When an SSL profile is configured on a virtual server on BIG-IP Virtual Edition (VE) without... High Unreviewed
CVE-2026-40618 was published May 13, 2026
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Set DMA segment... Moderate Unreviewed
CVE-2026-43302 was published May 8, 2026
vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters Moderate
CVE-2026-44223 was published for vllm (pip) May 6, 2026
Yunzez Credited to Yunzez
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database