Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,569
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,522
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

382 advisories

Loading
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of... High Unreviewed
CVE-2026-16924 was published Aug 20, 2026
A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an... Moderate Unreviewed
CVE-2026-73433 was published Aug 12, 2026
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and... High Unreviewed
CVE-2026-17485 was published Aug 13, 2026
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary... Low Unreviewed
CVE-2026-16241 was published Aug 13, 2026
A flaw was found in open-iscsi. An integer underflow vulnerability in the `iscsiuio` component,... Moderate Unreviewed
CVE-2026-18728 was published Aug 13, 2026
A flaw was found in open-iscsi's iscsiuio component. This vulnerability involves an integer... Moderate Unreviewed
CVE-2026-18727 was published Aug 13, 2026
MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly... High Unreviewed
CVE-2026-18687 was published Aug 11, 2026
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability... Moderate Unreviewed
CVE-2026-71389 was published Aug 11, 2026
Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows... High Unreviewed
CVE-2026-62696 was published Aug 11, 2026
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability... Moderate Unreviewed
CVE-2026-48435 was published Aug 11, 2026
A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the... High Unreviewed
CVE-2026-58016 was published Jun 30, 2026
A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer... High Unreviewed
CVE-2026-59090 was published Aug 10, 2026
An integer underflow was found in the popt library when formatting help text for option tables... Low Unreviewed
CVE-2026-18839 was published Aug 5, 2026
The raster Rust crate's crop() function (src/editor.rs) clamps the crop width/height against... High Unreviewed
CVE-2026-71202 was published Aug 5, 2026
Information Disclosure when processing wireless network channel switch information with... Moderate Unreviewed
CVE-2026-24077 was published Aug 4, 2026
FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL... High Unreviewed
CVE-2026-67298 was published Aug 1, 2026
An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a... High Unreviewed
CVE-2026-63362 was published Jul 31, 2026
Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability.... High Unreviewed
CVE-2026-13308 was published Jul 29, 2026
schreibfaul1 ESP32-audioI2S v3.4.5 has an integer underflow vulnerability in the MP3Decoder:... High Unreviewed
CVE-2026-51254 was published Jul 28, 2026
[This CNA information record relates to multiple CVEs; the text explains which aspects... Moderate Unreviewed
CVE-2026-42495 was published Jul 28, 2026
GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS) Moderate
CVE-2026-54345 was published for github.com/gopacket/gopacket (Go) Jul 28, 2026
tonghuaroot Credited to tonghuaroot and mosajjal mosajjal mosajjal
Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS... High Unreviewed
CVE-2026-45813 was published Jul 24, 2026
FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause... High Unreviewed
CVE-2026-65704 was published Jul 23, 2026
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero... High Unreviewed
CVE-2026-33845 was published Apr 30, 2026
CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure... Low Unreviewed
CVE-2026-40954 was published Jul 15, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database