Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,847
Maven
5,000+
npm
5,000+
NuGet
1,131
pip
5,000+
Pub
13
RubyGems
1,158
Rust
1,579
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20

380 advisories

Loading
minimp3 commit ea99364f contains an integer overflow vulnerability in mp3dec_skip_id3v1() when... Critical Unreviewed
CVE-2026-88365 was published Sep 24, 2026
An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms... Critical Unreviewed
CVE-2026-88351 was published Sep 24, 2026
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19... Critical Unreviewed
CVE-2026-93577 was published Sep 24, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow Critical
CVE-2026-77408 was published for github.com/rabbitmq/amqp091-go (Go) Sep 17, 2026
suchitd Credited to suchitd
Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to... Critical Unreviewed
CVE-2026-91728 was published Sep 15, 2026
Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote... Critical Unreviewed
CVE-2026-87643 was published Sep 9, 2026
MOOS-IvP through 24.8.1 contains a buffer overflow vulnerability in StringToIvPFunction() where... Critical Unreviewed
CVE-2026-85438 was published Sep 4, 2026
A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from... Critical Unreviewed
CVE-2026-9621 was published Sep 1, 2026
Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155... Critical Unreviewed
CVE-2026-84141 was published Sep 1, 2026
Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token) Critical
CVE-2026-54755 was published for github.com/klever-io/klever-go (Go) Aug 28, 2026
nickgs1337 Credited to nickgs1337
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the... Critical Unreviewed
CVE-2025-70290 was published Aug 26, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary... Critical Unreviewed
CVE-2026-17160 was published Aug 21, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary... Critical Unreviewed
CVE-2026-16917 was published Aug 19, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of... Critical Unreviewed
CVE-2026-16834 was published Aug 19, 2026
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox... Critical Unreviewed
CVE-2026-74964 was published Aug 18, 2026
New API: Integer overflow in quota billing yields negative charges (self-crediting) Critical
CVE-2026-71479 was published for github.com/QuantumNous/new-api (Go) Aug 17, 2026
lihui12388 Credited to lihui12388 and Calcium-Ion Calcium-Ion Calcium-Ion
The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an... Critical Unreviewed
CVE-2026-19001 was published Aug 12, 2026
llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache... Critical Unreviewed
CVE-2026-43629 was published Aug 7, 2026
Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote... Critical Unreviewed
CVE-2026-17726 was published Jul 30, 2026
Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to... Critical Unreviewed
CVE-2026-17717 was published Jul 30, 2026
Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who... Critical Unreviewed
CVE-2026-17682 was published Jul 30, 2026
Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who... Critical Unreviewed
CVE-2026-17673 was published Jul 30, 2026
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6... Critical Unreviewed
CVE-2026-64774 was published Jul 27, 2026
An integer overflow was addressed with improved input validation. This issue is fixed in macOS... Critical Unreviewed
CVE-2026-64694 was published Jul 27, 2026
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6... Critical Unreviewed
CVE-2026-43769 was published Jul 27, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database