Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,847
Maven
5,000+
npm
5,000+
NuGet
1,131
pip
5,000+
Pub
13
RubyGems
1,158
Rust
1,579
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20

3,061 advisories

Loading
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table... Moderate Unreviewed
CVE-2026-71973 was published Sep 30, 2026
Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who... Low Unreviewed
CVE-2026-95308 was published Sep 29, 2026
libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc(... High Unreviewed
CVE-2026-102633 was published Sep 29, 2026
NVIDIA DeepStream contains a vulnerability where an attacker could cause an integer overflow by... High Unreviewed
CVE-2026-65102 was published Sep 29, 2026
Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for... High Unreviewed
CVE-2026-10758 was published Sep 25, 2026
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to... High Unreviewed
CVE-2026-100208 was published Sep 25, 2026
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing... High Unreviewed
CVE-2026-88372 was published Sep 24, 2026
minimp3 commit ea99364f contains an integer overflow vulnerability in mp3dec_skip_id3v1() when... Critical Unreviewed
CVE-2026-88365 was published Sep 24, 2026
SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec()... High Unreviewed
CVE-2026-88361 was published Sep 24, 2026
An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms... Critical Unreviewed
CVE-2026-88351 was published Sep 24, 2026
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19... Critical Unreviewed
CVE-2026-93577 was published Sep 24, 2026
Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an... High Unreviewed
CVE-2026-6668 was published Sep 23, 2026
alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src... Moderate Unreviewed
CVE-2026-96674 was published Sep 23, 2026
FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(),... Moderate Unreviewed
CVE-2026-96611 was published Sep 23, 2026
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could... Moderate Unreviewed
CVE-2026-89277 was published Sep 22, 2026
Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional... High Unreviewed
CVE-2026-18462 was published Sep 22, 2026
A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the... High Unreviewed
CVE-2026-95619 was published Sep 22, 2026
An integer overflow in the _BulkInsert_ReadProperty component (/bulk_insert.c) of FalkorDB (Redis... Moderate Unreviewed
CVE-2026-88412 was published Sep 21, 2026
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute... High Unreviewed
CVE-2026-11725 was published Sep 18, 2026
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute... High Unreviewed
CVE-2026-11378 was published Sep 18, 2026
Integer overflow in µD3TN v0.15.0 TCPCLv3 handshake causes heap overflow, allowing remote... High Unreviewed
CVE-2026-93652 was published Sep 18, 2026
An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager... Moderate Unreviewed
CVE-2026-40531 was published Sep 18, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow Critical
CVE-2026-77408 was published for github.com/rabbitmq/amqp091-go (Go) Sep 17, 2026
suchitd Credited to suchitd
Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799) High
CVE-2026-63126 was published for com.squareup.wire:wire-runtime (Maven) Sep 17, 2026
thientd Credited to thientd and gladiator9797 gladiator9797 gladiator9797
Memory Corruption when validating large data buffers from external sources using addition to... High Unreviewed
CVE-2026-25290 was published Sep 17, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database