Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,428
Maven
5,000+
npm
5,000+
NuGet
1,088
pip
5,000+
Pub
13
RubyGems
1,129
Rust
1,506
Swift
62
Unreviewed advisories
All unreviewed
5,000+

15,752 advisories

Loading
A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function... Low Unreviewed
CVE-2026-17433 was published Jul 26, 2026
A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this... Low Unreviewed
CVE-2026-17432 was published Jul 26, 2026
Hubuum client library (Rust): Sensitive data may be exposed through default diagnostics Low
GHSA-2625-rw7m-5q5x was published for hubuum_client (Rust) Jul 24, 2026
A flaw was found in pki-core. The certificate authority (CA) renewal request path does not... Low Unreviewed
CVE-2026-17039 was published Jul 24, 2026
Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding Low
CVE-2026-59215 was published for open-webui (pip) Jul 24, 2026
DavidCarliez Credited to DavidCarliez and Classic298 Classic298 Classic298
Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse) Low
CVE-2026-59213 was published for open-webui (pip) Jul 24, 2026
Classic298 Credited to Classic298
Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave) Low
CVE-2026-59715 was published for open-webui (pip) Jul 24, 2026
sfwani Credited to sfwani and Classic298 Classic298 Classic298
Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation Low
CVE-2026-59226 was published for open-webui (pip) Jul 24, 2026
rexpository Credited to rexpository and Classic298 Classic298 Classic298
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion Low
GHSA-464c-974j-9xm6 was published for @aws-cdk/aws-codebuild (Go) Jul 24, 2026
ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape Low
CVE-2026-63632 was published for onnx (pip) Jul 24, 2026
MinicoAI Credited to MinicoAI
Stack-based Buffer Overflow (CWE-121) in `/usr/bin/ltsudo` `cmd_ipaddr_conflict` in Loytec LIP... Low Unreviewed
CVE-2026-55728 was published Jul 24, 2026
ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title Low
GHSA-76q6-2p6h-xjqr was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Kwstubbs Credited to Kwstubbs
ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified Low
GHSA-h5r4-w88w-7ccr was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Bin-infinite Credited to Bin-infinite
ImageMagick: Memory Leak in ICON decoder when allocation fails Low
GHSA-h58x-r7f7-rh84 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory leak in VIFF encoder when allocation fails Low
GHSA-m596-67p7-69wh was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in MIFF encoder when allocaton fails Low
GHSA-r628-69v2-2f9c was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Bin-infinite Credited to Bin-infinite
ImageMagick: Memory Leak in YUV decoder when opening of blob fails Low
GHSA-h7f2-f9cc-h2gv was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in TIFF encoder when an allocation fails Low
GHSA-jfq9-q63x-rc63 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in JNG encoder when a blob could not be opened Low
GHSA-99w9-hv66-rfv7 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in hough lines operation when an operation fails Low
GHSA-j8rh-v2r8-v94x was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in color transformation to log colorspace when operation fails Low
GHSA-7c7m-fpjw-gwcq was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Bin-infinite Credited to Bin-infinite
ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created. Low
GHSA-6vxp-gfwf-hcr9 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Information Disclosure when printing profiles with debug enabled Low
GHSA-hwf3-r46v-5ggx was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Bin-infinite Credited to Bin-infinite
ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails Low
GHSA-qvxh-prvr-85w2 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
RigelYoung Credited to RigelYoung
ImageMagick: Use-After-Free when freetype initialization fails Low
GHSA-6jwg-7q3p-5fqm was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
RigelYoung Credited to RigelYoung
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database