Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,636
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,529
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

15 advisories

Loading
In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22... Critical Unreviewed
CVE-2022-22532 was published Feb 11, 2022
In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6... Moderate Unreviewed
CVE-2017-7485 was published May 13, 2022
A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow... Moderate Unreviewed
CVE-2024-20316 was published Mar 27, 2024
Drupal core vulnerable to improper error handling Moderate
CVE-2024-11942 was published for drupal/core (Composer) Dec 5, 2024
A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file... Moderate Unreviewed
CVE-2024-12086 was published Jan 14, 2025
`gh attestation verify` returns incorrect exit code during verification if no attestations are present Moderate
CVE-2025-25204 was published for github.com/cli/cli/v2 (Go) Feb 14, 2025
codysoyland Credited to codysoyland, phillmv, kommendorkapten, and jkylekelly phillmv phillmv
kommendorkapten kommendorkapten jkylekelly jkylekelly
A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in... Moderate Unreviewed
CVE-2025-26465 was published Feb 18, 2025
Memory corruption during memory assignment to headless peripheral VM due to incorrect error code... High Unreviewed
CVE-2024-49841 was published May 6, 2025
Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request. Moderate Unreviewed
CVE-2025-27039 was published Oct 9, 2025
Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of... High Unreviewed
CVE-2025-46367 was published Nov 13, 2025
Improper handling of error condition during host-induced faults can allow a local high-privileged... Low Unreviewed
CVE-2025-0029 was published Feb 10, 2026
gitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callers Moderate
CVE-2026-44310 was published for github.com/sigstore/gitsign (Go) May 8, 2026
bugbunny-research Credited to bugbunny-research
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: propagate... Critical Unreviewed
CVE-2026-52989 was published Jun 24, 2026
Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs... Critical Unreviewed
CVE-2026-53434 was published Jun 29, 2026
A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored... Moderate Unreviewed
CVE-2026-59845 was published Jul 21, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database