Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

47 advisories

Loading
Astro: Remote code execution through AVIF image optimization Critical
GHSA-26w7-cxv4-gfx2 was published for astro (npm) Sep 8, 2026
cn-panda Credited to cn-panda
UEFI Firmware Parser has a heap out-of-bounds write in tiano decompressor ReadCLen Critical
CVE-2026-54334 was published for uefi-firmware (pip) Apr 16, 2026
1seal Credited to 1seal
UEFI Firmware Parser has a stack out-of-bounds write in tiano decompressor MakeTable Critical
CVE-2026-54333 was published for uefi-firmware (pip) Apr 16, 2026
1seal Credited to 1seal
Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access Critical
CVE-2026-34987 was published for wasmtime (Rust) Apr 10, 2026
shumbo Credited to shumbo, bholley, and deian bholley bholley
deian deian
Wasmtime: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift Critical
CVE-2026-34971 was published for wasmtime (Rust) Apr 9, 2026
shumbo Credited to shumbo, bholley, and deian bholley bholley
deian deian
Eclipse Parsson stack overflow when parsing deeply nested input Critical
CVE-2023-7272 was published for org.eclipse.parsson:parsson (Maven) Jul 17, 2024
hyavijava stack overflow vulnerability Critical
CVE-2023-51084 was published for com.github:hyavijava (Maven) Dec 27, 2023
Heap-based buffer overflow in ZBar Critical
CVE-2023-40889 was published for zbar (pip) Aug 29, 2023
Duplicate Advisory: Open Babel has out-of-bounds write in ORCA nAtoms parser Critical
GHSA-g8f4-g673-rfw2 was published for openbabel (pip) Jul 21, 2023 • withdrawn
Duplicate Advisory: Open Babel has out-of-bounds write in Gaussian translationVectors[] Critical
GHSA-v5fw-q4pf-8p2h was published for openbabel (pip) Jul 21, 2023 • withdrawn
Duplicate Advisory: Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant) Critical
GHSA-wj42-v2p3-fq2w was published for openbabel (pip) Jul 21, 2023 • withdrawn
Duplicate Advisory: Open Babel has out-of-bounds write in PQS coord_file parser Critical
GHSA-vx29-rwgr-834p was published for openbabel (pip) Jul 21, 2023 • withdrawn
Duplicate Advisory: Open Babel has out-of-bounds write in MSI translationVectors[] Critical
GHSA-83c5-hghm-jg6r was published for openbabel (pip) Jul 21, 2023 • withdrawn
Duplicate Advisory: Open Babel has out-of-bounds write in CSR PadString (title field) Critical
GHSA-jmf7-79p7-qchq was published for openbabel (pip) Jul 21, 2023 • withdrawn
Duplicate Advisory: Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT) Critical
GHSA-4r3q-94wc-xhq9 was published for openbabel (pip) Jul 21, 2023 • withdrawn
Duplicate Advisory: Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom) Critical
GHSA-jrjj-9h77-6vhv was published for openbabel (pip) Jul 21, 2023 • withdrawn
Duplicate Advisory: Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION) Critical
GHSA-hrvg-gx3j-wh53 was published for openbabel (pip) Jul 21, 2023 • withdrawn
Deno improperly handles resizable ArrayBuffer Critical
CVE-2023-28445 was published for Deno (Rust) Mar 23, 2023
lucacasonato Credited to lucacasonato, JohnTitor, and nipunn1313 JohnTitor JohnTitor
nipunn1313 nipunn1313
wasmtime vulnerable to guest-controlled out-of-bounds read/write on x86_64 Critical
CVE-2023-26489 was published for cranelift-codegen (Rust) Mar 9, 2023
alexcrichton Credited to alexcrichton
LZ4 vulnerable to Out-of-bounds Write Critical
CVE-2014-125026 was published for github.com/cloudflare/golz4 (Go) Dec 28, 2022
Heap buffer overflow in GPU Critical
CVE-2022-4135 was published for electron (npm) Nov 25, 2022
rajivshah3 Credited to rajivshah3
Apache Commons BCEL vulnerable to out-of-bounds write Critical
CVE-2022-42920 was published for org.apache.bcel:bcel (Maven) Nov 7, 2022
X.509 Email Address 4-byte Buffer Overflow Critical
CVE-2022-3602 was published for openssl-src (Rust) Nov 1, 2022
lz4-sys vulnerable to memory corruption via issue in liblz4 Critical
GHSA-9q5j-jm53-v7vr was published for lz4-sys (Rust) Sep 1, 2022
openssl-src heap memory corruption with RSA private key operation Critical
CVE-2022-2274 was published for openssl-src (Rust) Jul 2, 2022
sugar700 Credited to sugar700
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database