Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,624
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

2,115 advisories

Loading
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists... Critical Unreviewed
CVE-2025-70293 was published Aug 26, 2026
A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a... High Unreviewed
CVE-2026-84268 was published Sep 1, 2026
A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can... Moderate Unreviewed
CVE-2026-84269 was published Sep 1, 2026
A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git... High Unreviewed
CVE-2026-38347 was published Aug 28, 2026
A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a... High Unreviewed
CVE-2026-12912 was published Jun 29, 2026
Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing... Moderate Unreviewed
CVE-2026-39113 was published Aug 25, 2026
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation.... High Unreviewed
CVE-2026-56208 was published Jun 19, 2026
A malicious actor with access to an adjacent network could exploit a Buffer Overflow... Critical Unreviewed
CVE-2026-77532 was published Aug 28, 2026
An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote... Critical Unreviewed
CVE-2026-19313 was published Aug 28, 2026
A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an... High Unreviewed
CVE-2026-38821 was published Aug 28, 2026
A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated... Moderate Unreviewed
CVE-2026-81851 was published Aug 28, 2026
In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on... High Unreviewed
CVE-2026-53362 was published Jul 4, 2026
Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2026-34674 was published Aug 27, 2026
Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse,... High Unreviewed
CVE-2026-42536 was published Jun 8, 2026
A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by... High Unreviewed
CVE-2026-34355 was published Jun 8, 2026
mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a... High Unreviewed
CVE-2026-58097 was published Aug 26, 2026
A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format... High Unreviewed
CVE-2026-77652 was published Aug 26, 2026
Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who... High Unreviewed
CVE-2026-79216 was published Aug 25, 2026
Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to... High Unreviewed
CVE-2026-79231 was published Aug 25, 2026
Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote... High Unreviewed
CVE-2026-79142 was published Aug 25, 2026
Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to... Critical Unreviewed
CVE-2026-78948 was published Aug 25, 2026
Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to... High Unreviewed
CVE-2026-78891 was published Aug 25, 2026
Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to... Critical Unreviewed
CVE-2026-79130 was published Aug 25, 2026
The ZFS_IOC_RECV_NEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size... High Unreviewed
CVE-2026-49430 was published Aug 19, 2026
Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could... High Unreviewed
CVE-2026-48431 was published Aug 25, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database