Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

77 advisories

Loading
Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch High
CVE-2026-59205 was published for pillow (pip) Jul 20, 2026
Serotav Credited to Serotav and radarhere radarhere radarhere
Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow High
CVE-2026-59199 was published for Pillow (pip) Jul 20, 2026
Serotav Credited to Serotav and radarhere radarhere radarhere
Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION) High
CVE-2022-46292 was published for openbabel (pip) Jul 6, 2026
Open Babel has out-of-bounds write in MSI translationVectors[] High
CVE-2022-46295 was published for openbabel (pip) Jul 1, 2026
Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom) High
CVE-2022-46294 was published for openbabel (pip) Jul 1, 2026
Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT) High
CVE-2022-46293 was published for openbabel (pip) Jul 1, 2026
Open Babel has out-of-bounds write in Gaussian translationVectors[] High
CVE-2022-46291 was published for openbabel (pip) Jul 1, 2026
Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant) High
CVE-2022-46290 was published for openbabel (pip) Jul 1, 2026
Open Babel has out-of-bounds write in ORCA nAtoms parser High
CVE-2022-46289 was published for openbabel (pip) Jul 1, 2026
Open Babel has out-of-bounds write in MOL2 attribute/value parser High
CVE-2022-43607 was published for openbabel (pip) Jul 1, 2026
Open Babel has out-of-bounds write in PQS coord_file parser High
CVE-2022-43467 was published for openbabel (pip) Jul 1, 2026
Open Babel has out-of-bounds write in CSR PadString (title field) High
CVE-2022-41793 was published for openbabel (pip) Jul 1, 2026
Open Babel has out-of-bounds write in Gaussian coords_type orientation parser High
CVE-2022-37331 was published for openbabel (pip) Jul 1, 2026
Duplicate Advisory: vLLM introduced enhanced protection for CVE-2025-62164 High
GHSA-78fp-cf4h-g36p was published for vllm (pip) Jun 20, 2026 • withdrawn
Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow) High
CVE-2026-42311 was published for pillow (pip) May 4, 2026
EthanKim88 Credited to EthanKim88
OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write High
CVE-2026-34589 was published for OpenEXR (pip) Apr 8, 2026
quangIO Credited to quangIO
OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write High
CVE-2026-34588 was published for OpenEXR (pip) Apr 8, 2026
quangIO Credited to quangIO
OpenEXR: integer overflow to OOB write in uncompress_b44_impl() High
CVE-2026-34544 was published for openexr (pip) Apr 3, 2026
nicoppida Credited to nicoppida
skia-python vendors vulnerable libfreetype because of pinned cibuildwheel version High
GHSA-2mhw-8qcg-gr96 was published for skia-python (pip) Mar 19, 2026
UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop High
CVE-2026-32875 was published for ujson (pip) Mar 18, 2026
vmfunc Credited to vmfunc and bwoodsend bwoodsend bwoodsend
OpenEXR's CompositeDeepScanLine integer-overflow leads to heap OOB write High
CVE-2026-27622 was published for OpenEXR (pip) Mar 2, 2026
quangIO Credited to quangIO and thaidn thaidn thaidn
Pillow affected by out-of-bounds write when loading PSD images High
CVE-2026-25990 was published for pillow (pip) Feb 11, 2026
wiredfool Credited to wiredfool, radarhere, hugovk, and yardenporat353 radarhere radarhere
hugovk hugovk yardenporat353 yardenporat353
vLLM introduced enhanced protection for CVE-2025-62164 High
CVE-2026-56340 was published for vllm (pip) Jan 8, 2026
vLLM deserialization vulnerability leading to DoS and potential RCE High
CVE-2025-62164 was published for vllm (pip) Nov 20, 2025
omriaxion Credited to omriaxion, russellb, DarkLight1337, Isotr0py, ywang96, and davidatom russellb russellb
DarkLight1337 DarkLight1337 Isotr0py Isotr0py ywang96 ywang96 davidatom davidatom
Heap-based Buffer Overflow in sqlite-vec High
CVE-2024-46488 was published for sqlite-vec (RubyGems) Sep 25, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database