Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
101
GitHub Actions
54
Go
4,296
Maven
5,000+
npm
5,000+
NuGet
1,029
pip
5,000+
Pub
13
RubyGems
1,116
Rust
1,492
Swift
61
Unreviewed advisories
All unreviewed
5,000+

1,313 advisories

Loading
Inappropriate implementation in DOM in Google Chrome prior to 150.0.7871.115 allowed a remote... High Unreviewed
CVE-2026-15123 was published Jul 9, 2026
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files... High Unreviewed
CVE-2026-56003 was published Jul 8, 2026
A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8... High Unreviewed
CVE-2026-56002 was published Jul 8, 2026
Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before... High Unreviewed
CVE-2026-55999 was published Jul 8, 2026
A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing... High Unreviewed
CVE-2026-56001 was published Jul 8, 2026
A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base)... High Unreviewed
CVE-2026-11610 was published Jul 7, 2026
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to... High Unreviewed
CVE-2026-56645 was published Jul 3, 2026
A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow... High Unreviewed
CVE-2026-58379 was published Jul 3, 2026
jxl-grid on 32-bit platforms has an out-of-bounds writes due to integer overflow High
CVE-2026-52834 was published for jxl-grid (Rust) Jul 2, 2026
Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker... High Unreviewed
CVE-2026-14427 was published Jul 2, 2026
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote... High Unreviewed
CVE-2026-14415 was published Jul 2, 2026
Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote... High Unreviewed
CVE-2026-14385 was published Jul 2, 2026
Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant) High
CVE-2022-46290 was published for openbabel (pip) Jul 1, 2026
Open Babel has out-of-bounds write in ORCA nAtoms parser High
CVE-2022-46289 was published for openbabel (pip) Jul 1, 2026
Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies High
CVE-2025-10997 was published for openbabel (pip) Jul 1, 2026
Heap buffer overflow in WebNN in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote... High Unreviewed
CVE-2026-14087 was published Jul 1, 2026
Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a local attacker... High Unreviewed
CVE-2026-13884 was published Jul 1, 2026
Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote... High Unreviewed
CVE-2026-13835 was published Jul 1, 2026
A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a... High Unreviewed
CVE-2026-12912 was published Jun 29, 2026
RTKLIB through 2.4.3 contains a heap buffer overflow vulnerability in the readrnxobsb function in... High Unreviewed
CVE-2026-56789 was published Jun 25, 2026
List::SomeUtils::XS versions before 0.59 for Perl have a heap buffer overflow in the pairwise... High Unreviewed
CVE-2026-12844 was published Jun 25, 2026
If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR... High Unreviewed
CVE-2026-12244 was published Jun 25, 2026
GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2026-2050 was published Jun 25, 2026
Oj: Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent High
CVE-2026-54896 was published for oj (RubyGems) Jun 19, 2026
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation.... High Unreviewed
CVE-2026-56208 was published Jun 19, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database