Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

277 advisories

Loading
In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of... Moderate Unreviewed
CVE-2026-86142 was published Sep 5, 2026
Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An... Moderate Unreviewed
CVE-2026-75619 was published Aug 19, 2026
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to... Moderate Unreviewed
CVE-2026-18341 was published Sep 4, 2026
A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can... Moderate Unreviewed
CVE-2026-84269 was published Sep 1, 2026
Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing... Moderate Unreviewed
CVE-2026-39113 was published Aug 25, 2026
A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated... Moderate Unreviewed
CVE-2026-81851 was published Aug 28, 2026
A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not... Moderate Unreviewed
CVE-2026-48914 was published Jun 12, 2026
luci-lib-px5g (LuCI) contains a heap-based buffer overflow in the native ASN.1 encoding routine... Moderate Unreviewed
CVE-2026-62381 was published Aug 22, 2026
Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability. This... Moderate Unreviewed
CVE-2026-18271 was published Aug 20, 2026
Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows... Moderate Unreviewed
CVE-2026-76917 was published Aug 20, 2026
Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Moderate Unreviewed
CVE-2026-76883 was published Aug 20, 2026
UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Moderate Unreviewed
CVE-2026-76889 was published Aug 20, 2026
SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Moderate Unreviewed
CVE-2026-76918 was published Aug 20, 2026
hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the... Moderate Unreviewed
CVE-2026-68765 was published Aug 17, 2026
In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper... Moderate Unreviewed
CVE-2026-18368 was published Aug 13, 2026
TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service Moderate Unreviewed
CVE-2026-19694 was published Aug 13, 2026
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges... Moderate Unreviewed
CVE-2026-70330 was published Aug 11, 2026
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges... Moderate Unreviewed
CVE-2026-70304 was published Aug 11, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose... Moderate Unreviewed
CVE-2026-66810 was published Aug 11, 2026
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges... Moderate Unreviewed
CVE-2026-65799 was published Aug 11, 2026
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Moderate Unreviewed
CVE-2026-65797 was published Aug 11, 2026
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to... Moderate Unreviewed
CVE-2026-65796 was published Aug 11, 2026
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Moderate Unreviewed
CVE-2026-62883 was published Aug 11, 2026
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Moderate Unreviewed
CVE-2026-62881 was published Aug 11, 2026
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Moderate Unreviewed
CVE-2026-62769 was published Aug 11, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database