Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

39 advisories

Loading
Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1 Moderate
CVE-2026-114501 was published for Pillow (pip) Oct 23, 2026
akx Credited to akx
ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate Moderate
CVE-2026-106111 was published for SixLabors.ImageSharp (NuGet) Oct 7, 2026
MegaManSec Credited to MegaManSec
devalue: `stringify`/`uneval` serialize shared memory High
CVE-2026-92708 was published for devalue (npm) Oct 1, 2026
LipezJ Credited to LipezJ and elliott-with-the-longest-name-on-github elliott-with-the-longest-name-on-github elliott-with-the-longest-name-on-github
Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a... Moderate Unreviewed
CVE-2026-18023 was published Sep 8, 2026
Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset()... Critical Unreviewed
CVE-2026-74791 was published Aug 16, 2026
In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning... Moderate Unreviewed
CVE-2026-74250 was published Aug 15, 2026
Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not... High Unreviewed
CVE-2026-13585 was published Jul 15, 2026
SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a sensitive... High Unreviewed
CVE-2026-32960 was published Apr 20, 2026
Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables High
CVE-2026-5795 was published for org.eclipse.jetty.ee10:jetty-ee10-jaspi (Maven) Apr 14, 2026
HRsGIT Credited to HRsGIT
Duplicate Advisory: Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables High
GHSA-gc59-r5jq-98qw was published for org.eclipse.jetty.ee10:jetty-ee10 (Maven) Apr 8, 2026 • withdrawn
The Semtech LR11xx LoRa transceivers running early versions of firmware contains an information... Moderate Unreviewed
CVE-2025-14858 was published Apr 7, 2026
AnyBurn 4.3 x86 contains a denial of service vulnerability that allows local attackers to crash... Moderate Unreviewed
CVE-2019-25657 was published Apr 5, 2026
OpenClaw: Gateway HTTP /sessions/:sessionKey/kill Reaches Admin Kill Path Without Caller Scope Binding High
GHSA-9p93-7j67-5pc2 was published for openclaw (npm) Mar 27, 2026
zpbrent Credited to zpbrent
Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset() High
GHSA-x6m9-38vm-2xhf was published for Scriban.Signed (NuGet) Mar 24, 2026
Zwique Credited to Zwique and adamus2 adamus2 adamus2
WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 contains a denial of service vulnerability that allows... Moderate Unreviewed
CVE-2019-25645 was published Mar 24, 2026
Ease Audio Converter 5.30 contains a denial of service vulnerability in the Audio Cutter function... Moderate Unreviewed
CVE-2019-25617 was published Mar 22, 2026
MediaMonkey 4.1.23 contains a denial of service vulnerability that allows local attackers to... Moderate Unreviewed
CVE-2019-25571 was published Mar 21, 2026
Lyric Video Creator 2.1 contains a denial of service vulnerability that allows attackers to crash... High Unreviewed
CVE-2019-25560 was published Mar 21, 2026
CEWE PHOTO IMPORTER 6.4.3 contains a denial of service vulnerability that allows local attackers... Moderate Unreviewed
CVE-2019-25553 was published Mar 21, 2026
PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to... Moderate Unreviewed
CVE-2019-25563 was published Mar 21, 2026
IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an attacker to access... Moderate Unreviewed
CVE-2025-13108 was published Feb 17, 2026
In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit... Moderate Unreviewed
CVE-2025-0647 was published Jan 14, 2026
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a... Low Unreviewed
CVE-2025-33198 was published Nov 25, 2025
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a... Low Unreviewed
CVE-2025-33200 was published Nov 25, 2025
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a... Moderate Unreviewed
CVE-2025-33196 was published Nov 25, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database