Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,338
Maven
5,000+
npm
5,000+
NuGet
1,032
pip
5,000+
Pub
13
RubyGems
1,122
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

147 advisories

Loading
A heap-based buffer overflow vulnerability exists in the input parsing logic of Arcserve Unified... Critical Unreviewed
CVE-2025-34522 was published Aug 28, 2025
A heap-based buffer overflow vulnerability exists in the RHS2000 parsing functionality of The... Critical Unreviewed
CVE-2025-48005 was published Aug 25, 2025
A heap-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig... Critical Unreviewed
CVE-2025-53557 was published Aug 25, 2025
A heap-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig... Critical Unreviewed
CVE-2025-53511 was published Aug 25, 2025
A heap-based buffer overflow vulnerability exists in the Nex parsing functionality of The Biosig... Critical Unreviewed
CVE-2025-54462 was published Aug 25, 2025
A heap-based buffer overflow vulnerability exists in the ISHNE parsing functionality of The... Critical Unreviewed
CVE-2025-53853 was published Aug 25, 2025
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a... Critical Unreviewed
CVE-2025-53766 was published Aug 12, 2025
NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker... Critical Unreviewed
CVE-2025-23317 was published Aug 6, 2025
Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker... Critical Unreviewed
CVE-2025-47981 was published Jul 8, 2025
In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check.... Critical Unreviewed
CVE-2025-20680 was published Jul 8, 2025
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... Critical Unreviewed
CVE-2025-20685 was published Jul 8, 2025
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... Critical Unreviewed
CVE-2025-20686 was published Jul 8, 2025
A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote... Critical Unreviewed
CVE-2025-20260 was published Jun 18, 2025
Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered... Critical Unreviewed
CVE-2025-47868 was published Jun 16, 2025
In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check.... Critical Unreviewed
CVE-2025-20672 was published Jun 2, 2025
A malicious actor with access to the management network could execute a remote code execution ... Critical Unreviewed
CVE-2025-23123 was published May 19, 2025
BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several... Critical Unreviewed
CVE-2025-40906 was published May 16, 2025
SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to heap-based buffer overflow... Critical Unreviewed
CVE-2024-50698 was published Jan 25, 2025
OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component... Critical Unreviewed
CVE-2024-55192 was published Jan 24, 2025
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper... Critical Unreviewed
CVE-2024-12084 was published Jan 15, 2025
A vulnerability has been identified in Opcenter Execution Foundation (All versions), Opcenter... Critical Unreviewed
CVE-2024-49775 was published Dec 16, 2024
Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability.... Critical Unreviewed
CVE-2024-6246 was published Nov 22, 2024
A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700. Critical Unreviewed
CVE-2023-29125 was published Nov 5, 2024
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC... Critical Unreviewed
CVE-2024-38812 was published Sep 17, 2024
A vulnerability has been identified in SIMATIC Information Server 2022 (All versions), SIMATIC... Critical Unreviewed
CVE-2024-33698 was published Sep 10, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database