Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

3,633 advisories

Loading
Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest... High Unreviewed
CVE-2026-71912 was published Aug 24, 2026
Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function.... High Unreviewed
CVE-2026-71911 was published Aug 24, 2026
hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write()... Moderate Unreviewed
CVE-2026-68768 was published Aug 22, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary... Critical Unreviewed
CVE-2026-17040 was published Aug 21, 2026
Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2026-18279 was published Aug 20, 2026
Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability... Low Unreviewed
CVE-2026-18280 was published Aug 20, 2026
A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attacker... Moderate Unreviewed
CVE-2026-20302 was published Aug 19, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client... High Unreviewed
CVE-2026-14970 was published Aug 19, 2026
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through... High Unreviewed
CVE-2026-19489 was published Aug 19, 2026
NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon... High Unreviewed
CVE-2026-24184 was published Aug 18, 2026
resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read Critical
CVE-2026-55209 was published for resdata (pip) Aug 18, 2026
oddmunds Credited to oddmunds
Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in the... High Unreviewed
CVE-2026-70415 was published Aug 18, 2026
A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function... Low Unreviewed
CVE-2026-75093 was published Aug 18, 2026
Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to... Critical Unreviewed
CVE-2026-39254 was published Aug 17, 2026
Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to... Critical Unreviewed
CVE-2026-39255 was published Aug 17, 2026
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and... High Unreviewed
CVE-2026-17220 was published Aug 13, 2026
A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI... High Unreviewed
CVE-2026-19002 was published Aug 12, 2026
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in... High Unreviewed
CVE-2026-70465 was published Aug 12, 2026
The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the... Critical Unreviewed
CVE-2025-41769 was published Aug 12, 2026
A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint... High Unreviewed
CVE-2026-15565 was published Aug 11, 2026
D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044... Critical Unreviewed
CVE-2026-71957 was published Aug 8, 2026
D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044... Critical Unreviewed
CVE-2026-71958 was published Aug 8, 2026
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote... High Unreviewed
CVE-2026-20348 was published Aug 7, 2026
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote... High Unreviewed
CVE-2026-20337 was published Aug 7, 2026
Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial... High Unreviewed
CVE-2026-67871 was published Aug 6, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database