Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,513
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,512
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,724 advisories

Loading
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an... Moderate Unreviewed
CVE-2026-17216 was published Aug 13, 2026
IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server... Moderate Unreviewed
CVE-2026-18671 was published Aug 13, 2026
CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57.... Moderate Unreviewed
CVE-2026-55400 was published Aug 13, 2026
Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of... High Unreviewed
CVE-2026-15742 was published Aug 13, 2026
Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to... High Unreviewed
CVE-2026-14677 was published Aug 13, 2026
Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged... High Unreviewed
CVE-2026-14662 was published Aug 13, 2026
The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an... Critical Unreviewed
CVE-2026-19001 was published Aug 12, 2026
Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could... High Unreviewed
CVE-2026-47940 was published Aug 11, 2026
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to... High Unreviewed
CVE-2026-70329 was published Aug 11, 2026
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to... High Unreviewed
CVE-2026-62751 was published Aug 11, 2026
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges... High Unreviewed
CVE-2026-58641 was published Aug 11, 2026
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate... High Unreviewed
CVE-2026-59127 was published Aug 11, 2026
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could... Moderate Unreviewed
CVE-2026-48444 was published Aug 11, 2026
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could... Moderate Unreviewed
CVE-2026-48445 was published Aug 11, 2026
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could... Moderate Unreviewed
CVE-2026-48387 was published Aug 11, 2026
Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader may allow an information... Low Unreviewed
CVE-2026-28729 was published Aug 11, 2026
A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 ... High Unreviewed
CVE-2026-15562 was published Aug 11, 2026
A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` plugin... Moderate Unreviewed
CVE-2026-59088 was published Aug 10, 2026
GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12()... Moderate Unreviewed
CVE-2026-71392 was published Aug 10, 2026
GNU Emacs for Android is vulnerable to an integer overflow in sfnt_read_name_table() in src/sfnt... Moderate Unreviewed
CVE-2026-71393 was published Aug 10, 2026
Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins... High Unreviewed
CVE-2026-19389 was published Aug 10, 2026
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote... High Unreviewed
CVE-2026-20339 was published Aug 7, 2026
FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow... High Unreviewed
CVE-2026-70628 was published Aug 7, 2026
llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the... High Unreviewed
CVE-2026-43627 was published Aug 7, 2026
Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who... Low Unreviewed
CVE-2026-19167 was published Aug 7, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database