Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

316 advisories

Loading
An Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks... High Unreviewed
CVE-2026-101957 was published Oct 14, 2026
Improper initialization in an ASUS certain motherboard allows an physically proximate user to... High Unreviewed
CVE-2026-93495 was published Oct 1, 2026
Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a... High Unreviewed
CVE-2026-87616 was published Sep 9, 2026
Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote... Moderate Unreviewed
CVE-2026-78940 was published Aug 25, 2026
Improper initialization in some firmware for some Intel(R) Active Management Technology (Intel(R)... Moderate Unreviewed
CVE-2026-20734 was published Aug 11, 2026
Parts of the DM_OP handling code assumes the caller has provided the required number of buffers... High Unreviewed
CVE-2026-62433 was published Jul 28, 2026
A memory initialization issue was addressed with improved memory handling. This issue is fixed in... Critical Unreviewed
CVE-2026-64775 was published Jul 27, 2026
A malicious actor with access to the network and under certain conditions could exploit an... High Unreviewed
CVE-2026-54409 was published Jul 2, 2026
CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance Moderate
CVE-2026-54777 was published for CoreWCF.NetNamedPipe (NuGet) Jun 19, 2026
Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at network-creation... Moderate Unreviewed
CVE-2026-12539 was published Jun 18, 2026
DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch) Moderate
CVE-2026-65898 was published for dompurify (npm) Jun 18, 2026
trace37labs Credited to trace37labs and EchoTydes EchoTydes EchoTydes
aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence Low
CVE-2026-54279 was published for aiohttp (pip) Jun 15, 2026
denyspakizh-tob Credited to denyspakizh-tob and bdraco bdraco bdraco
Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal... Moderate Unreviewed
CVE-2025-35991 was published May 12, 2026
Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out) High
GHSA-f5v8-v6q3-q4h6 was published for Meridian.Mapping (NuGet) Apr 16, 2026
A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that... High Unreviewed
CVE-2026-0940 was published Mar 11, 2026
An issue was discovered in LBS in Samsung Mobile Processor Exynos 2200. There was no check for... High Unreviewed
CVE-2025-66363 was published Mar 3, 2026
filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identity Low
CVE-2026-26958 was published for filippo.io/edwards25519 (Go) Feb 18, 2026
WeebDataHoarder Credited to WeebDataHoarder and shaharcohen1 shaharcohen1 shaharcohen1
Missing Checks in certain functions related to RMP initialization can allow a local admin... Low Unreviewed
CVE-2025-48509 was published Feb 10, 2026
Improper initialization for some ESXi kernel mode driver for the Intel(R) Ethernet 800-Series... Low Unreviewed
CVE-2025-25058 was published Feb 10, 2026
In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU... Low Unreviewed
CVE-2026-23553 was published Jan 28, 2026
An Incorrect Initialization of Resource vulnerability in the Internal Device Manager (IDM) of... High Unreviewed
CVE-2026-21913 was published Jan 15, 2026
A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function... Moderate Unreviewed
CVE-2025-14955 was published Dec 19, 2025
Improper resource management in firmware of some Solidigm DC Products may allow an attacker with... Moderate Unreviewed
CVE-2025-12902 was published Nov 7, 2025
Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor... Low Unreviewed
CVE-2024-36331 was published Sep 6, 2025
ArrayQueue's push_front is not panic-safe Moderate
GHSA-xqjr-wfx3-gmxv was published for array-queue (Rust) Sep 2, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database