Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
101
GitHub Actions
54
Go
4,296
Maven
5,000+
npm
5,000+
NuGet
1,029
pip
5,000+
Pub
13
RubyGems
1,116
Rust
1,492
Swift
61
Unreviewed advisories
All unreviewed
5,000+

12 advisories

Loading
UltraVNC repeater through 1.8.2.2 contains an off-by-one error in the Base64 decode helper used... Low Unreviewed
CVE-2026-44042 was published Jul 1, 2026
Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE... Low Unreviewed
CVE-2026-44603 was published May 7, 2026
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over... Low Unreviewed
CVE-2026-43964 was published May 4, 2026
mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest. Low Unreviewed
CVE-2026-43860 was published May 4, 2026
ImageMagick has has an off-by-one origin validation in allows out-of-bounds read in morphology processing Low
GHSA-q8h3-jv9v-57qx was published for Magick.NET-Q16-AnyCPU (NuGet) Apr 14, 2026
shitianyu-2004 Credited to shitianyu-2004
ImageMagick has a Heap Buffer Overflow in InterpretImageFilename Low
CVE-2025-53014 was published for Magick.NET-Q16-AnyCPU (NuGet) Aug 25, 2025
momo-trip Credited to momo-trip, iwashiira, utshina, and on-keyday iwashiira iwashiira
utshina utshina on-keyday on-keyday
Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64 Low
CVE-2023-41880 was published for wasmtime (Rust) Sep 14, 2023
afonso360 Credited to afonso360
wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64 Low
CVE-2023-27477 was published for cranelift-codegen (Rust) Mar 9, 2023
afonso360 Credited to afonso360
The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6... Low Unreviewed
CVE-2010-2955 was published May 13, 2022
Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify... Low Unreviewed
CVE-2001-1391 was published Apr 30, 2022
WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to... Low Unreviewed
CVE-2004-0342 was published Apr 29, 2022
Heap buffer overflow caused by rounding Low
CVE-2021-29529 was published for tensorflow (pip) May 21, 2021
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database