Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,636
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,529
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

396 advisories

Loading
Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP... Moderate Unreviewed
CVE-2026-18916 was published Sep 1, 2026
A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause... High Unreviewed
CVE-2026-9624 was published Sep 1, 2026
A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet targeting... High Unreviewed
CVE-2026-9622 was published Sep 1, 2026
Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped) Critical
CVE-2026-54754 was published for github.com/klever-io/klever-go (Go) Aug 28, 2026
fbsobreira Credited to fbsobreira
gix-packetline: reachable panic on empty side-band packet (pre-auth network DoS) Moderate
GHSA-2vh6-hw4j-32ww was published for gix-packetline (Rust) Aug 28, 2026
KutalVolkan Credited to KutalVolkan
gitoxide gix-packetline versions before 0.21.5 contain a panic vulnerability in the TextRef... High Unreviewed
CVE-2026-82250 was published Aug 28, 2026
An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote... High Unreviewed
CVE-2026-78011 was published Aug 28, 2026
An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote... High Unreviewed
CVE-2026-19314 was published Aug 28, 2026
An integer underflow was found in the DHCPv4 packet capture code of wicked.... Moderate Unreviewed
CVE-2026-71401 was published Aug 27, 2026
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability... Moderate Unreviewed
CVE-2026-76189 was published Aug 25, 2026
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability... High Unreviewed
CVE-2026-71442 was published Aug 25, 2026
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability... Moderate Unreviewed
CVE-2026-71444 was published Aug 25, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of... High Unreviewed
CVE-2026-18670 was published Aug 21, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary... High Unreviewed
CVE-2026-16996 was published Aug 21, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of... High Unreviewed
CVE-2026-16924 was published Aug 20, 2026
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary... Low Unreviewed
CVE-2026-16241 was published Aug 13, 2026
A flaw was found in open-iscsi. An integer underflow vulnerability in the `iscsiuio` component,... Moderate Unreviewed
CVE-2026-18728 was published Aug 13, 2026
A flaw was found in open-iscsi's iscsiuio component. This vulnerability involves an integer... Moderate Unreviewed
CVE-2026-18727 was published Aug 13, 2026
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and... High Unreviewed
CVE-2026-17485 was published Aug 13, 2026
A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an... Moderate Unreviewed
CVE-2026-73433 was published Aug 12, 2026
MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly... High Unreviewed
CVE-2026-18687 was published Aug 11, 2026
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability... Moderate Unreviewed
CVE-2026-71389 was published Aug 11, 2026
Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows... High Unreviewed
CVE-2026-62696 was published Aug 11, 2026
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability... Moderate Unreviewed
CVE-2026-48435 was published Aug 11, 2026
A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer... High Unreviewed
CVE-2026-59090 was published Aug 10, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database