Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,509
Maven
5,000+
npm
5,000+
NuGet
1,100
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

13 advisories

Loading
MACsec feature on Juniper Networks Junos OS 15.1X49 prior to 15.1X49-D100 on SRX300 series does... High Unreviewed
CVE-2017-2342 was published May 13, 2022
blurhash panics on parsing crafted inputs High
CVE-2023-42447 was published for blurhash (Rust) Sep 21, 2023
rubdos Credited to rubdos
phonenumber panics on parsing crafted RFC3966 inputs High
CVE-2023-42444 was published for phonenumber (Rust) Sep 21, 2023
sno2 Credited to sno2 and gferon gferon gferon
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The REST API... Low Unreviewed
CVE-2023-48430 was published Dec 12, 2023
panic on parsing crafted phonenumber inputs Critical
CVE-2024-39697 was published for phonenumber (Rust) Jul 9, 2024
rubdos Credited to rubdos
Vulnerable OpenSSL included in cryptography wheels Low
CVE-2024-12797 was published for cryptography (pip) Feb 11, 2025
In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c can be NULL or an empty... Critical Unreviewed
CVE-2025-32743 was published Apr 10, 2025
DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service ... Low Unreviewed
CVE-2025-26268 was published Apr 17, 2025
NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local... High Unreviewed
CVE-2025-23270 was published Jul 17, 2025
The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via... Low Unreviewed
CVE-2025-59398 was published Sep 15, 2025
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that... Moderate Unreviewed
CVE-2026-20005 was published Mar 4, 2026
libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure High
GHSA-434v-x5qv-pmh6 was published for libcrux-ed25519 (Rust) Mar 26, 2026
net-imap vulnerable to STARTTLS stripping via invalid response timing High
CVE-2026-42246 was published for net-imap (RubyGems) May 4, 2026
Masamuneee Credited to Masamuneee
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database