Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,608
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

585 advisories

Loading
protobufjs : Schema-derived names can shadow runtime-significant properties Moderate
CVE-2026-54269 was published for protobufjs (npm) Jun 15, 2026
acorn421 Credited to acorn421 and dcodeIO dcodeIO dcodeIO
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an... Moderate Unreviewed
CVE-2026-0262 was published May 13, 2026
A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally... Moderate Unreviewed
CVE-2026-0235 was published May 13, 2026
A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN... Moderate Unreviewed
CVE-2026-0269 was published Jun 11, 2026
Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass... Moderate Unreviewed
CVE-2026-0241 was published May 13, 2026
An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding... High Unreviewed
CVE-2026-57020 was published Jul 10, 2026
An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding... Moderate Unreviewed
CVE-2026-57031 was published Jul 10, 2026
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding... High Unreviewed
CVE-2026-57022 was published Jul 10, 2026
An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol... High Unreviewed
CVE-2026-33801 was published Jul 9, 2026
An Improper Check for Unusual or Exceptional Conditions vulnerability in the advanced... High Unreviewed
CVE-2026-33794 was published Jul 9, 2026
printenv: environment variables with invalid UTF-8 are silently skipped (evades inspection) Moderate
CVE-2026-35366 was published for uu_printenv (Rust) Jul 6, 2026
Duplicate Advisory: uutils coreutils has an Improper Check for Unusual or Exceptional Conditions Moderate
GHSA-7259-cwhx-3xx3 was published for coreutils (Rust) Apr 22, 2026 • withdrawn
kill: 'kill -1' parsed as PID -1, sending SIGTERM to all processes (system crash / DoS) Moderate
CVE-2026-35369 was published for uu_kill (Rust) Jul 6, 2026
zebrad vulnerable to full node denial of service via crafted Sapling receiver in z_listunifiedreceivers Moderate
GHSA-c8w6-x74f-vmg3 was published for zebra-rpc (Rust) Jul 2, 2026
robustfengbin Credited to robustfengbin, mpguerra, and upbqdn mpguerra mpguerra
upbqdn upbqdn
SurrealDB: Crafting malicious LIVE queries writes to the database, resulting in DoS, without permission to the table required Moderate
GHSA-4v76-cw68-4vc9 was published for surrealdb (Rust) Jul 1, 2026
LucyEgan Credited to LucyEgan
SurrealDB has unauthenticated remote DoS via malformed RPC `use` call High
GHSA-wjjj-24cx-f28g was published for surrealdb (Rust) Jul 1, 2026
Mattermost doesn't filter nil elements from outgoing webhook attachment payloads before processing Moderate
CVE-2026-4915 was published for github.com/mattermost/mattermost-server (Go) May 26, 2026
Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability... High Unreviewed
CVE-2026-4694 was published Mar 24, 2026
Sandbox escape due to incorrect boundary conditions in the Telemetry component. This... High Unreviewed
CVE-2026-4687 was published Mar 24, 2026
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability affects... High Unreviewed
CVE-2026-4693 was published Mar 24, 2026
Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability... High Unreviewed
CVE-2026-4695 was published Mar 24, 2026
Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects... High Unreviewed
CVE-2026-4685 was published Mar 24, 2026
Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects... High Unreviewed
CVE-2026-4686 was published Mar 24, 2026
Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability... High Unreviewed
CVE-2026-4697 was published Mar 24, 2026
Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability affects... High Unreviewed
CVE-2026-4699 was published Mar 24, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database