Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

13,182 advisories

Loading
cgltf through 1.15 contains a heap out-of-bounds write vulnerability in... High Unreviewed
CVE-2026-112018 was published Oct 18, 2026
libtta through 2.3 contains a stack out-of-bounds read and write vulnerability in... Moderate Unreviewed
CVE-2026-112012 was published Oct 18, 2026
Schism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in... Moderate Unreviewed
CVE-2026-112007 was published Oct 18, 2026
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash... High Unreviewed
CVE-2026-111880 was published Oct 17, 2026
A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system... Moderate Unreviewed
CVE-2026-89088 was published Oct 17, 2026
A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially... Moderate Unreviewed
CVE-2026-89085 was published Oct 17, 2026
A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets... High Unreviewed
CVE-2026-105958 was published Oct 16, 2026
FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in... High Unreviewed
CVE-2026-111382 was published Oct 16, 2026
A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver... Moderate Unreviewed
CVE-2026-89062 was published Oct 16, 2026
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in... Moderate Unreviewed
CVE-2026-111270 was published Oct 16, 2026
nifti_clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in... Moderate Unreviewed
CVE-2026-111275 was published Oct 16, 2026
snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient:... High Unreviewed
CVE-2026-111280 was published Oct 16, 2026
libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability... Moderate Unreviewed
CVE-2026-111161 was published Oct 15, 2026
libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in init_soundfont() in... Moderate Unreviewed
CVE-2026-111156 was published Oct 15, 2026
SoX through 14.4.2 contains a heap out-of-bounds write vulnerability in... Moderate Unreviewed
CVE-2026-111157 was published Oct 15, 2026
OpenJPH through 0.32.0 contains a heap out-of-bounds write vulnerability in the HTJ2K cleanup... Moderate Unreviewed
CVE-2026-111151 was published Oct 15, 2026
libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont... Moderate Unreviewed
CVE-2026-111154 was published Oct 15, 2026
libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2... Moderate Unreviewed
CVE-2026-111136 was published Oct 15, 2026
libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString() in lib... Moderate Unreviewed
CVE-2026-111137 was published Oct 15, 2026
FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to... Moderate Unreviewed
CVE-2026-111123 was published Oct 15, 2026
AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update() in src/ksm.cpp... Moderate Unreviewed
CVE-2026-110875 was published Oct 15, 2026
A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory... Moderate Unreviewed
CVE-2026-79841 was published Oct 15, 2026
FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of... High Unreviewed
CVE-2026-110839 was published Oct 15, 2026
A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue... Moderate Unreviewed
CVE-2026-86856 was published Oct 14, 2026
A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor... Moderate Unreviewed
CVE-2026-86846 was published Oct 14, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database