Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

365 advisories

Loading
Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie... Moderate Unreviewed
CVE-2026-19518 was published Aug 11, 2026
GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory()... Moderate Unreviewed
CVE-2026-71394 was published Aug 10, 2026
Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering High
CVE-2026-71314 was published for nuxt (npm) Aug 5, 2026
manop55555 Credited to manop55555
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco... High Unreviewed
CVE-2026-20313 was published Aug 5, 2026
imagecli's `carve <ratio>` pipeline operation (Carve::apply() in src/image_ops.rs) only asserts ... High Unreviewed
CVE-2026-70378 was published Aug 5, 2026
Improper Input Validation in the decode() function of the traceparser library could allow an... High Unreviewed
CVE-2026-40272 was published Jul 29, 2026
Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions. High Unreviewed
CVE-2026-59532 was published Jul 27, 2026
Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions. High Unreviewed
CVE-2026-59531 was published Jul 27, 2026
Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the... High Unreviewed
CVE-2026-66374 was published Jul 25, 2026
It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller... High Unreviewed
CVE-2026-11721 was published Jul 22, 2026
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC (DoQ) is... High Unreviewed
CVE-2026-32665 was published Jul 22, 2026
Immutable.js `List` 32-bit trie overflow → unrecoverable DoS High
CVE-2026-59879 was published for immutable (npm) Jul 21, 2026
mateuszismyname Credited to mateuszismyname, jdeniau, ravali-ch15, domcleal, LeongXuhua, and Ryan-Leber jdeniau jdeniau
ravali-ch15 ravali-ch15 domcleal domcleal LeongXuhua LeongXuhua Ryan-Leber Ryan-Leber
Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content Moderate
CVE-2026-59930 was published for mistune (pip) Jul 20, 2026
offset Credited to offset
Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated... High Unreviewed
CVE-2026-59695 was published Jul 17, 2026
Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated... High Unreviewed
CVE-2026-59694 was published Jul 17, 2026
Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated... High Unreviewed
CVE-2026-59252 was published Jul 17, 2026
Pomerium Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callback High
CVE-2026-50285 was published for github.com/pomerium/pomerium (Go) Jul 15, 2026
bugbunny-research Credited to bugbunny-research
Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Payment –... Moderate Unreviewed
CVE-2026-57364 was published Jul 13, 2026
An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding... High Unreviewed
CVE-2026-57019 was published Jul 10, 2026
An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of... High Unreviewed
CVE-2026-57023 was published Jul 10, 2026
pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small Moderate
CVE-2026-53720 was published for pymonocypher (pip) Jul 9, 2026
hextheshadow Credited to hextheshadow
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments,... Moderate Unreviewed
CVE-2026-59997 was published Jul 8, 2026
** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI... High Unreviewed
CVE-2022-4989 was published Jul 3, 2026
** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI... High Unreviewed
CVE-2022-4990 was published Jul 3, 2026
Unauthenticated Arbitrary Code Execution in W3 Total Cache <= 2.9.4 versions. Critical Unreviewed
CVE-2026-57623 was published Jul 2, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database