Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,624
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,035 advisories

Loading
A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can... Moderate Unreviewed
CVE-2026-84269 was published Sep 1, 2026
A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a... High Unreviewed
CVE-2026-84268 was published Sep 1, 2026
A malicious actor with access to an adjacent network could exploit a Buffer Overflow... Critical Unreviewed
CVE-2026-77532 was published Aug 28, 2026
A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an... High Unreviewed
CVE-2026-38821 was published Aug 28, 2026
An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote... Critical Unreviewed
CVE-2026-19313 was published Aug 28, 2026
A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated... Moderate Unreviewed
CVE-2026-81851 was published Aug 28, 2026
A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git... High Unreviewed
CVE-2026-38347 was published Aug 28, 2026
Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2026-34674 was published Aug 27, 2026
A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format... High Unreviewed
CVE-2026-77652 was published Aug 26, 2026
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists... Critical Unreviewed
CVE-2025-70293 was published Aug 26, 2026
mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a... High Unreviewed
CVE-2026-58097 was published Aug 26, 2026
Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who... High Unreviewed
CVE-2026-79216 was published Aug 25, 2026
Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to... High Unreviewed
CVE-2026-79231 was published Aug 25, 2026
Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote... High Unreviewed
CVE-2026-79142 was published Aug 25, 2026
Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to... Critical Unreviewed
CVE-2026-79130 was published Aug 25, 2026
Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to... Critical Unreviewed
CVE-2026-78948 was published Aug 25, 2026
Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to... High Unreviewed
CVE-2026-78891 was published Aug 25, 2026
Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing... Moderate Unreviewed
CVE-2026-39113 was published Aug 25, 2026
Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result... High Unreviewed
CVE-2026-75769 was published Aug 25, 2026
Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result... High Unreviewed
CVE-2026-75766 was published Aug 25, 2026
Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result... High Unreviewed
CVE-2026-75750 was published Aug 25, 2026
Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result... High Unreviewed
CVE-2026-75767 was published Aug 25, 2026
Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result... High Unreviewed
CVE-2026-48425 was published Aug 25, 2026
Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could... High Unreviewed
CVE-2026-48430 was published Aug 25, 2026
Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could... High Unreviewed
CVE-2026-48433 was published Aug 25, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database