Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

124 advisories

Loading
Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image... Low Unreviewed
CVE-2026-110734 was published Oct 14, 2026
Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may... Low Unreviewed
CVE-2026-87726 was published Oct 8, 2026
The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on... Low Unreviewed
CVE-2026-59783 was published Oct 5, 2026
A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number()... Low Unreviewed
CVE-2026-103680 was published Oct 1, 2026
In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper()... Low Unreviewed
CVE-2026-93894 was published Sep 18, 2026
A flaw was found in Cockpit. An integer overflow vulnerability in the `do_lastlog()` function,... Low Unreviewed
CVE-2026-91142 was published Sep 18, 2026
An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580... Low Unreviewed
CVE-2026-33967 was published Sep 14, 2026
An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580... Low Unreviewed
CVE-2026-33956 was published Sep 14, 2026
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380,... Low Unreviewed
CVE-2026-33960 was published Sep 14, 2026
An issue was discovered in Samsung Mobile Processor Exynos 1330, 1380, 1480, and 2400. An out-of... Low Unreviewed
CVE-2026-23793 was published Sep 14, 2026
SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data... Low Unreviewed
CVE-2026-9805 was published Aug 26, 2026
nnn is vulnerable to Out-of-Bound write vulnerability. Due to lack of validation of attacker... Low Unreviewed
CVE-2026-65609 was published Aug 19, 2026
Out-of-bounds write in the firmware for the Intel(R) Slim Bootloader may allow a denial of... Low Unreviewed
CVE-2026-25194 was published Aug 11, 2026
A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an... Low Unreviewed
CVE-2026-11736 was published Aug 11, 2026
A flaw was found in popt, a command-line option parsing library. An off-by-one error in the... Low Unreviewed
CVE-2026-18739 was published Aug 4, 2026
Ruby json: JSON generator heap buffer overflow when streaming to an IO Low
CVE-2026-54696 was published for json (RubyGems) Jul 23, 2026
susdrip Credited to susdrip
Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM... Low Unreviewed
CVE-2026-15997 was published Jul 17, 2026
Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow Low
CVE-2025-10995 was published for openbabel (pip) Jun 30, 2026
Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms... Low Unreviewed
CVE-2026-6325 was published Jun 26, 2026
snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file. Low Unreviewed
CVE-2026-39199 was published Jun 17, 2026
Out of bounds write and reads in openSeaChest’s --showSCSIDefects in Seagate’s openSeaChest v25... Low Unreviewed
CVE-2026-10717 was published Jun 3, 2026
Out of bounds write in openSeaChest’s --showSupportedFormats in Seagate’s openSeaChest v25.05.3... Low Unreviewed
CVE-2026-10719 was published Jun 3, 2026
A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. Affected is the... Low Unreviewed
CVE-2026-8263 was published May 11, 2026
ImageMagick has out-of-bounds access in ConnectedComponentsImage() via CLI-controlled connected-components:* artifacts Low
CVE-2026-56370 was published for Magick.NET-Q16-AnyCPU (NuGet) Apr 14, 2026
ylwango613 Credited to ylwango613
A stack buffer overflow vulnerability exists in wolfSSL's PKCS7 SignedData encoding functionality... Low Unreviewed
CVE-2026-0819 was published Mar 19, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database