Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,608
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

44 advisories

Loading
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over... Critical Unreviewed
CVE-2026-56190 was published Jul 14, 2026
In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in... Critical Unreviewed
CVE-2026-53225 was published Jun 25, 2026
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: propagate... Critical Unreviewed
CVE-2026-52989 was published Jun 24, 2026
Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This... Critical Unreviewed
CVE-2026-4716 was published Mar 24, 2026
Uninitialized memory in the Graphics: Canvas2D component. This vulnerability affects Firefox <... Critical Unreviewed
CVE-2026-4715 was published Mar 24, 2026
Uninitialized memory in the Graphics: Text component. This vulnerability affects Firefox < 148. Critical Unreviewed
CVE-2026-2806 was published Feb 24, 2026
Insufficient input validation leading to memory overread on the NetScaler Management Interface... Critical Unreviewed
CVE-2025-5777 was published Jun 17, 2025
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6:... Critical Unreviewed
CVE-2024-47685 was published Oct 21, 2024
HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c. Critical Unreviewed
CVE-2024-32611 was published May 14, 2024
** DISPUTED ** A vulnerability was found in ewxrjk sftpserver. It has been declared as... Critical Unreviewed
CVE-2020-36617 was published Dec 18, 2022
A vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS... Critical Unreviewed
CVE-2021-1619 was published May 24, 2022
The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector... Critical Unreviewed
CVE-2021-1104 was published May 24, 2022
A flaw was found in libwebp in versions before 1.0.1. An unitialized variable is used in function... Critical Unreviewed
CVE-2018-25014 was published May 24, 2022
A latent vulnerability exists in the Prio library where data may be read from uninitialized... Critical Unreviewed
CVE-2019-9805 was published May 24, 2022
A certain crafted HTTP packet can trigger an uninitialized function pointer deference... Critical Unreviewed
CVE-2019-0006 was published May 13, 2022
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3... Critical Unreviewed
CVE-2019-9641 was published May 13, 2022
An out-of-bounds write vulnerability exists in the device TestEmail functionality of reolink RLC... Critical Unreviewed
CVE-2022-21217 was published Jan 29, 2022
Use of Uninitialized Resource in flumedb. Critical
CVE-2021-45684 was published for flumedb (Rust) Jan 6, 2022
J3rry-1729 Credited to J3rry-1729
Use of Uninitialized Resource in acc_reader. Critical
CVE-2020-36513 was published for acc_reader (Rust) Jan 6, 2022
Use of Uninitialized Resource in acc_reader. Critical
CVE-2020-36514 was published for acc_reader (Rust) Jan 6, 2022
Use of Uninitialized Resource in buffoon. Critical
CVE-2020-36512 was published for buffoon (Rust) Jan 6, 2022
Use of Uninitialized Resource in bronzedb-protocol. Critical
CVE-2021-45682 was published for bronzedb-protocol (Rust) Jan 6, 2022
Use of Uninitialized Resource in binjs_io. Critical
CVE-2021-45683 was published for binjs_io (Rust) Jan 6, 2022
Use of Uninitialized Resource in csv-sniffer. Critical
CVE-2021-45686 was published for csv-sniffer (Rust) Jan 6, 2022
J3rry-1729 Credited to J3rry-1729
columnar: Read on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec()) Critical
CVE-2021-45685 was published for columnar (Rust) Jan 6, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database