Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,847
Maven
5,000+
npm
5,000+
NuGet
1,131
pip
5,000+
Pub
13
RubyGems
1,158
Rust
1,579
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20

121 advisories

Loading
Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign,... Moderate Unreviewed
CVE-2026-92790 was published Sep 16, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure... Critical Unreviewed
CVE-2026-20329 was published Sep 16, 2026
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit... High Unreviewed
CVE-2026-71645 was published Sep 11, 2026
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit... Critical Unreviewed
CVE-2026-71640 was published Sep 11, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... High Unreviewed
CVE-2026-80135 was published Sep 7, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco... High Unreviewed
CVE-2026-20280 was published Sep 2, 2026
qs: Denial of Service via Attacker Controlled isBuffer Moderate
CVE-2026-82417 was published for qs (npm) Sep 2, 2026
waydeshi Credited to waydeshi and ljharb ljharb ljharb
Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose... High Unreviewed
CVE-2026-26446 was published Aug 26, 2026
This issue was addressed through improved state management. This issue is fixed in iOS 26.6.1 and... Moderate Unreviewed
CVE-2026-65351 was published Aug 18, 2026
This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10... Moderate Unreviewed
CVE-2026-65332 was published Aug 18, 2026
This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10... Moderate Unreviewed
CVE-2026-65331 was published Aug 18, 2026
Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state Moderate
CVE-2026-56818 was published for io.netty:netty-codec-redis (Maven) Aug 7, 2026
rexpository Credited to rexpository
ImageMagick: Heap-use-after-free via XMP profile could result in a crash Low
GHSA-qh5g-q395-cx4j was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the... Low Unreviewed
CVE-2026-16218 was published Jul 19, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS... High Unreviewed
CVE-2026-20187 was published Jul 15, 2026
A missing authorization vulnerability exists in the embedded webserver of HP Deskjet 2800 Series... High Unreviewed
CVE-2026-13753 was published Jul 6, 2026
Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was... High Unreviewed
CVE-2026-12324 was published Jun 16, 2026
Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length High
CVE-2026-44893 was published for io.netty:netty-codec-haproxy (Maven) Jun 8, 2026
Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source... Moderate Unreviewed
CVE-2026-47316 was published May 19, 2026
XiangShan (Open-source high-performance RISC-V processor) commit... High Unreviewed
CVE-2026-29643 was published Apr 21, 2026
Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint Moderate
CVE-2026-34388 was published for github.com/fleetdm/fleet/v4 (Go) Mar 30, 2026
fuzzztf Credited to fuzzztf
2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error... Moderate Unreviewed
CVE-2025-59787 was published Mar 4, 2026
malcontent: Nested archive extraction failure can drop content from scan inputs Moderate
CVE-2026-28407 was published for github.com/chainguard-dev/malcontent (Go) Feb 28, 2026
1seal Credited to 1seal and egibs egibs egibs
rPGP vulnerable to parser crash on crafted RSA secret key packets through CVE-2026-21895 High
GHSA-7587-4wv6-m68m was published for pgp (Rust) Feb 13, 2026
invd Credited to invd
An inconsistent user interface issue was addressed with improved state management. This issue is... Moderate Unreviewed
CVE-2026-20640 was published Feb 12, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database