Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,608
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

542 advisories

Loading
A flaw was found in libsolv, a dependency-resolution library used by RPM-based package managers... Moderate Unreviewed
CVE-2026-82327 was published Aug 28, 2026
rclone versions >= v1.72.0 and <= v1.74.4 (fixed in v1.75.0) contain multiple denial-of-service... High Unreviewed
CVE-2026-79775 was published Aug 25, 2026
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and... High Unreviewed
CVE-2026-17097 was published Aug 19, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of... Moderate Unreviewed
CVE-2026-16849 was published Aug 19, 2026
resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read Critical
CVE-2026-55209 was published for resdata (pip) Aug 18, 2026
oddmunds Credited to oddmunds
Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service High
CVE-2026-52856 was published for github.com/pterodactyl/wings (Go) Jul 31, 2026
OctoGency Credited to OctoGency and WilliamVenner WilliamVenner WilliamVenner
In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch... High Unreviewed
CVE-2026-64272 was published Jul 25, 2026
In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the... High Unreviewed
CVE-2026-64273 was published Jul 25, 2026
In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the... High Unreviewed
CVE-2026-64271 was published Jul 25, 2026
frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow High
CVE-2026-73564 was published for github.com/fatedier/frp (Go) Jul 24, 2026
arkmarta Credited to arkmarta
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux:... High Unreviewed
CVE-2026-64243 was published Jul 24, 2026
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add... High Unreviewed
CVE-2026-64225 was published Jul 24, 2026
Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records Moderate
CVE-2026-73489 was published for russh (Rust) Jul 24, 2026
afldl Credited to afldl
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add... High Unreviewed
CVE-2026-53386 was published Jul 19, 2026
In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add... High Unreviewed
CVE-2026-53387 was published Jul 19, 2026
Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the... Moderate Unreviewed
CVE-2026-63308 was published Jul 17, 2026
NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation... High Unreviewed
CVE-2026-24238 was published Jul 14, 2026
Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This... High Unreviewed
CVE-2026-15685 was published Jul 14, 2026
GoBGP confederation validation panics on empty AS_PATH attribute Moderate
CVE-2026-49838 was published for github.com/osrg/gobgp/v4 (Go) Jul 9, 2026
acorn421 Credited to acorn421 and hibrian827 hibrian827 hibrian827
The application opens a PDF, but the cloud-like appearance of the construction process lacks... High Unreviewed
CVE-2026-57251 was published Jul 8, 2026
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)... High Unreviewed
CVE-2026-57272 was published Jul 2, 2026
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)... High Unreviewed
CVE-2026-57270 was published Jul 2, 2026
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)... High Unreviewed
CVE-2026-57271 was published Jul 2, 2026
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)... High Unreviewed
CVE-2026-13131 was published Jul 2, 2026
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)... High Unreviewed
CVE-2026-57266 was published Jul 2, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database