Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
101
GitHub Actions
54
Go
4,316
Maven
5,000+
npm
5,000+
NuGet
1,030
pip
5,000+
Pub
13
RubyGems
1,116
Rust
1,493
Swift
61
Unreviewed advisories
All unreviewed
5,000+

13 advisories

Loading
Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01,... Moderate Unreviewed
CVE-2011-3045 was published May 13, 2022
illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned... High Unreviewed
CVE-2016-6560 was published May 13, 2022
An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU... High Unreviewed
CVE-2020-6096 was published May 24, 2022
Signed to Unsigned Conversion Error in Facebook Hermes High
CVE-2020-1913 was published for hermes-engine (npm) May 24, 2022
An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of... Critical Unreviewed
CVE-2022-43663 was published Mar 20, 2023
Okio Signed to Unsigned Conversion Error vulnerability Moderate
CVE-2023-3635 was published for com.squareup.okio:okio (Maven) Jul 12, 2023
trettstadtnlb Credited to trettstadtnlb and adrienpessu adrienpessu adrienpessu
Memory corruption while parsing the ADSP response command. High Unreviewed
CVE-2023-33034 was published Oct 3, 2023
Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated... Moderate Unreviewed
CVE-2023-28063 was published Feb 6, 2024
drivers/wlan/wlan_mgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant... High Unreviewed
CVE-2024-25388 was published Mar 27, 2024
A Signed to Unsigned Conversion Error vulnerability in the Layer 2 Control Protocol daemon (l2cpd... High Unreviewed
CVE-2025-30646 was published Apr 9, 2025
Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5... High Unreviewed
CVE-2025-65495 was published Nov 24, 2025
Sequoia PGP has Subtraction Overflow when aes_key_unwrap function is provided ciphertext that is too short Moderate
CVE-2025-67897 was published for sequoia-openpgp (Rust) Dec 14, 2025
OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp Moderate
CVE-2026-26981 was published for OpenEXR (pip) Apr 6, 2026
JungWooJJING Credited to JungWooJJING
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database