Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
101
GitHub Actions
54
Go
4,316
Maven
5,000+
npm
5,000+
NuGet
1,030
pip
5,000+
Pub
13
RubyGems
1,116
Rust
1,493
Swift
61
Unreviewed advisories
All unreviewed
5,000+

315 advisories

Loading
Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition... High Unreviewed
CVE-2026-48344 was published Jul 14, 2026
Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an... High Unreviewed
CVE-2026-56648 was published Jul 14, 2026
Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized... High Unreviewed
CVE-2026-50658 was published Jul 14, 2026
Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges... High Unreviewed
CVE-2026-50673 was published Jul 14, 2026
In the Linux kernel, the following vulnerability has been resolved: sched/psi: fix race between... High Unreviewed
CVE-2026-52991 was published Jun 24, 2026
Kernel software installed and running inside a Host VM may post improper commands to the GPU... High Unreviewed
CVE-2026-45203 was published Jul 10, 2026
Diffusers: TOCTOU Trust Remote Code Bypass High
CVE-2026-45804 was published for diffusers (pip) May 20, 2026
zafido Credited to zafido and gal-zafran gal-zafran gal-zafran
In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor... High Unreviewed
CVE-2026-46227 was published May 28, 2026
In the Linux kernel, the following vulnerability has been resolved: xsk: cache csum_start... High Unreviewed
CVE-2026-53250 was published Jun 25, 2026
@better-auth/oauth-provider's OAuth authorization-code grant allows concurrent redemption when two token requests race the find-then-delete primitive High
CVE-2026-53518 was published for @better-auth/oauth-provider (npm) Jul 7, 2026
chdanielmueller Credited to chdanielmueller
Better Auth: OAuth refresh-token rotation forks the token family on concurrent redemption High
CVE-2026-53517 was published for @better-auth/oauth-provider (npm) Jul 7, 2026
chdanielmueller Credited to chdanielmueller
Memory Corruption when processing asynchronous input parameters due to improper handling of... High Unreviewed
CVE-2026-25271 was published Jul 6, 2026
Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an... High Unreviewed
CVE-2026-58299 was published Jul 3, 2026
OpenClaw: Combined POSIX shell options could confuse exec revalidation High
CVE-2026-53806 was published for openclaw (npm) Jul 2, 2026
YLChen-007 Credited to YLChen-007
OpenClaw: Node pairing reconnection could confuse approval scope state High
GHSA-83w9-h5wv-j9xm was published for openclaw (npm) Jul 2, 2026
YLChen-007 Credited to YLChen-007
NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time... High Unreviewed
CVE-2026-24260 was published Jul 1, 2026
In the Linux kernel, the following vulnerability has been resolved: drm/gem: Try to fix... High Unreviewed
CVE-2026-53145 was published Jun 25, 2026
A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's... High Unreviewed
CVE-2026-54228 was published Jun 13, 2026
Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in... High Unreviewed
CVE-2026-29518 was published May 20, 2026
Undefined behavior may result due to a race condition leading to a use-after-free violation. If... High Unreviewed
CVE-2026-5947 was published May 20, 2026
Hi.Events through 1.9.0 contains a promo code validation vulnerability where reservation... High Unreviewed
CVE-2026-57959 was published Jun 29, 2026
acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition... High Unreviewed
CVE-2026-54370 was published Jun 29, 2026
@budibase/backend-core has potential SSRF DNS rebinding bypass in outbound fetch validation High
CVE-2026-54353 was published for @budibase/backend-core (npm) Jun 22, 2026
Artex09 Credited to Artex09
A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a... High Unreviewed
CVE-2026-41045 was published Jun 22, 2026
Spring Cloud Config Server Susceptible To TOCTOU Attack High
CVE-2026-41002 was published for org.springframework.cloud:spring-cloud-config-server (Maven) May 7, 2026
scottfrederick Credited to scottfrederick
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database