Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,883
Maven
5,000+
npm
5,000+
NuGet
1,134
pip
5,000+
Pub
13
RubyGems
1,159
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,555
Rust
20

204 advisories

Loading
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer... High Unreviewed
CVE-2026-47600 was published Sep 30, 2026
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows... High Unreviewed
CVE-2026-94056 was published Sep 20, 2026
FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX... High Unreviewed
CVE-2026-91946 was published Sep 15, 2026
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to... High Unreviewed
CVE-2026-78519 was published Sep 8, 2026
Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to... High Unreviewed
CVE-2026-72989 was published Sep 8, 2026
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute... High Unreviewed
CVE-2026-69485 was published Sep 8, 2026
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute... High Unreviewed
CVE-2026-69358 was published Sep 8, 2026
FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit uninitialized heap memory in Save... High Unreviewed
CVE-2026-85089 was published Sep 3, 2026
Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to... High Unreviewed
CVE-2026-84326 was published Sep 2, 2026
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to... High Unreviewed
CVE-2026-16868 was published Aug 13, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero... High Unreviewed
CVE-2026-64413 was published Jul 25, 2026
FFmpeg through 8.1.2, fixed in commit 8670835, contains an information disclosure vulnerability... High Unreviewed
CVE-2026-66038 was published Jul 24, 2026
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This... High Unreviewed
CVE-2026-16385 was published Jul 21, 2026
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This... High Unreviewed
CVE-2026-16384 was published Jul 21, 2026
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This... High Unreviewed
CVE-2026-16386 was published Jul 21, 2026
In the Linux kernel, the following vulnerability has been resolved: riscv: Fix register... High Unreviewed
CVE-2026-64082 was published Jul 19, 2026
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When... High Unreviewed
CVE-2026-60005 was published Jul 15, 2026
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to... High Unreviewed
CVE-2026-55949 was published Jul 14, 2026
Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to... High Unreviewed
CVE-2026-49165 was published Jul 14, 2026
libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize... High Unreviewed
CVE-2026-58051 was published Jun 28, 2026
In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: reject DMA... High Unreviewed
CVE-2026-53170 was published Jun 25, 2026
In the Linux kernel, the following vulnerability has been resolved: bonding: fix type confusion... High Unreviewed
CVE-2026-43456 was published May 8, 2026
In the Linux kernel, the following vulnerability has been resolved: libceph: Use u32 for non... High Unreviewed
CVE-2026-43405 was published May 8, 2026
In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Fix parameter... High Unreviewed
CVE-2026-43291 was published May 8, 2026
In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix uninitialized... High Unreviewed
CVE-2026-43139 was published May 6, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database