Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,863
Maven
5,000+
npm
5,000+
NuGet
1,131
pip
5,000+
Pub
13
RubyGems
1,158
Rust
1,585
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,873 advisories

Loading
A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability... High Unreviewed
CVE-2026-10118 was published Jun 1, 2026
A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap... Moderate Unreviewed
CVE-2025-14087 was published Dec 10, 2025
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service ... Moderate Unreviewed
CVE-2025-14512 was published Dec 11, 2025
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer... High Unreviewed
CVE-2026-4775 was published Mar 24, 2026
A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network... High Unreviewed
CVE-2026-16529 was published Jul 30, 2026
Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated... High Unreviewed
CVE-2026-93546 was published Oct 1, 2026
An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and... Moderate Unreviewed
CVE-2026-88350 was published Sep 22, 2026
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an... High Unreviewed
CVE-2026-47577 was published Sep 30, 2026
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer... High Unreviewed
CVE-2026-47556 was published Sep 30, 2026
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer... High Unreviewed
CVE-2026-47510 was published Sep 30, 2026
NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode... High Unreviewed
CVE-2026-47502 was published Sep 30, 2026
A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an... High Unreviewed
CVE-2026-58384 was published Jul 7, 2026
An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An... High Unreviewed
CVE-2026-95616 was published Sep 30, 2026
A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin... High Unreviewed
CVE-2026-66758 was published Jul 27, 2026
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table... Moderate Unreviewed
CVE-2026-71973 was published Sep 30, 2026
Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who... Low Unreviewed
CVE-2026-95308 was published Sep 29, 2026
libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc(... High Unreviewed
CVE-2026-102633 was published Sep 29, 2026
NVIDIA DeepStream contains a vulnerability where an attacker could cause an integer overflow by... High Unreviewed
CVE-2026-65102 was published Sep 29, 2026
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in... Critical Unreviewed
CVE-2026-5121 was published Mar 30, 2026
minimp3 commit ea99364f contains an integer overflow vulnerability in mp3dec_skip_id3v1() when... Critical Unreviewed
CVE-2026-88365 was published Sep 24, 2026
Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for... High Unreviewed
CVE-2026-10758 was published Sep 25, 2026
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to... High Unreviewed
CVE-2026-100208 was published Sep 25, 2026
SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec()... High Unreviewed
CVE-2026-88361 was published Sep 24, 2026
An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms... Critical Unreviewed
CVE-2026-88351 was published Sep 24, 2026
A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 ... High Unreviewed
CVE-2026-15562 was published Aug 11, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database