Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
101
GitHub Actions
54
Go
4,296
Maven
5,000+
npm
5,000+
NuGet
1,029
pip
5,000+
Pub
13
RubyGems
1,116
Rust
1,492
Swift
61
Unreviewed advisories
All unreviewed
5,000+

167 advisories

Loading
LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow... Moderate Unreviewed
CVE-2026-8357 was published Jun 15, 2026
UltraVNC repeater through 1.8.2.2 contains an off-by-one error in the Base64 decode helper used... Low Unreviewed
CVE-2026-44042 was published Jul 1, 2026
UltraVNC viewer through 1.8.2.2 contains an off-by-one stack buffer overflow in the RFB... High Unreviewed
CVE-2026-7831 was published Jul 1, 2026
In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: fix... High Unreviewed
CVE-2026-52907 was published Jun 9, 2026
In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix off-by-one in... Moderate Unreviewed
CVE-2026-53263 was published Jun 25, 2026
In the Linux kernel, the following vulnerability has been resolved: tty: hvc_iucv: fix off-by... Moderate Unreviewed
CVE-2026-53306 was published Jun 26, 2026
In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in... Critical Unreviewed
CVE-2026-53309 was published Jun 26, 2026
A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the... High Unreviewed
CVE-2026-58380 was published Jul 6, 2026
An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart.... High Unreviewed
CVE-2026-12413 was published Jul 3, 2026
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list... High Unreviewed
CVE-2026-58014 was published Jun 30, 2026
In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) Multi-Link... Moderate Unreviewed
CVE-2026-58374 was published Jun 30, 2026
A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check.... Moderate Unreviewed
CVE-2026-42015 was published May 27, 2026
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over... Low Unreviewed
CVE-2026-43964 was published May 4, 2026
XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in... Critical Unreviewed
CVE-2006-10003 was published Mar 19, 2026
There's a flaw in the nbdkit server when handling responses from its plugins regarding the status... Moderate Unreviewed
CVE-2025-47711 was published Jun 9, 2025
CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer overflow in... High Unreviewed
CVE-2026-56790 was published Jun 25, 2026
RTKLIB through 2.4.3 contains an off-by-one out-of-bounds read vulnerability in the decode_ssr3... Moderate Unreviewed
CVE-2026-56787 was published Jun 25, 2026
In the Linux kernel, the following vulnerability has been resolved: ceph: fix num_ops off-by-one... Moderate Unreviewed
CVE-2026-46066 was published May 27, 2026
Gogs Vulnerable to Privilege Escalation via Collaboration Access Mode Validation Moderate
CVE-2026-52804 was published for gogs.io/gogs (Go) Jun 23, 2026
CE2Sec Credited to CE2Sec
A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an... Moderate Unreviewed
CVE-2026-4887 was published Mar 26, 2026
nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header()... High Unreviewed
CVE-2026-54410 was published Jun 14, 2026
ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder. Moderate
CVE-2026-46559 was published for Magick.NET-Q16-AnyCPU (NuGet) May 18, 2026
007bsd Credited to 007bsd
ImageMagick: Out-of-Bounds Read of a single byte in meta encoder Moderate
CVE-2026-45358 was published for Magick.NET-Q16-AnyCPU (NuGet) May 18, 2026
007bsd Credited to 007bsd
In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive... Moderate Unreviewed
CVE-2025-71161 was published Jan 23, 2026
Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability... High Unreviewed
CVE-2026-49127 was published May 28, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database