Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,637
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,529
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

396 advisories

Loading
An integer underflow was found in the popt library when formatting help text for option tables... Low Unreviewed
CVE-2026-18839 was published Aug 5, 2026
The raster Rust crate's crop() function (src/editor.rs) clamps the crop width/height against... High Unreviewed
CVE-2026-71202 was published Aug 5, 2026
Information Disclosure when processing wireless network channel switch information with... Moderate Unreviewed
CVE-2026-24077 was published Aug 4, 2026
FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL... High Unreviewed
CVE-2026-67298 was published Aug 1, 2026
An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a... High Unreviewed
CVE-2026-63362 was published Jul 31, 2026
Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability.... High Unreviewed
CVE-2026-13308 was published Jul 29, 2026
GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS) Moderate
CVE-2026-54345 was published for github.com/gopacket/gopacket (Go) Jul 28, 2026
tonghuaroot Credited to tonghuaroot and mosajjal mosajjal mosajjal
[This CNA information record relates to multiple CVEs; the text explains which aspects... Moderate Unreviewed
CVE-2026-42495 was published Jul 28, 2026
schreibfaul1 ESP32-audioI2S v3.4.5 has an integer underflow vulnerability in the MP3Decoder:... High Unreviewed
CVE-2026-51254 was published Jul 28, 2026
Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS... High Unreviewed
CVE-2026-45813 was published Jul 24, 2026
FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause... High Unreviewed
CVE-2026-65704 was published Jul 23, 2026
CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure... Low Unreviewed
CVE-2026-40954 was published Jul 15, 2026
CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure... Low Unreviewed
CVE-2026-40955 was published Jul 15, 2026
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability... Moderate Unreviewed
CVE-2026-48298 was published Jul 15, 2026
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability... Moderate Unreviewed
CVE-2026-48296 was published Jul 15, 2026
Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to... High Unreviewed
CVE-2026-55011 was published Jul 14, 2026
Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an... High Unreviewed
CVE-2026-54982 was published Jul 14, 2026
Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to... High Unreviewed
CVE-2026-49181 was published Jul 14, 2026
OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption... Critical Unreviewed
CVE-2026-51540 was published Jul 14, 2026
U-Boot through 2026.04-rc3 contains an integer underflow vulnerability in the... High Unreviewed
CVE-2026-29008 was published Jul 8, 2026
FatFs R0.16 and earlier exhibits a stale dirty-cache skip via unsigned-subtraction wrap in f_read... Moderate Unreviewed
CVE-2026-6685 was published Jul 1, 2026
A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the... High Unreviewed
CVE-2026-58016 was published Jun 30, 2026
Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in... Moderate Unreviewed
CVE-2026-58058 was published Jun 28, 2026
libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in... High Unreviewed
CVE-2026-57918 was published Jun 26, 2026
Integer underflow in wc_PKCS7_DecryptOri when handling crafted Other Recipient Info, leading to... Low Unreviewed
CVE-2026-6678 was published Jun 25, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database