GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
10 advisories
sqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks
Low
CVE-2026-54620
was published
for
sqlite3
(RubyGems)
Jul 28, 2026
sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity
Low
CVE-2026-54619
was published
for
sqlite3
(RubyGems)
Jul 28, 2026
Oj: Stack Buffer Overflow in Oj.dump via Large Indent
High
CVE-2026-54502
was published
for
oj
(RubyGems)
Jun 19, 2026
Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`
Low
GHSA-phwj-rprq-35pp
was published
for
nokogiri
(RubyGems)
Jun 19, 2026
Nokogiri: Possible Use-After-Free in XInclude Processing
Low
GHSA-wfpw-mmfh-qq69
was published
for
nokogiri
(RubyGems)
Jun 19, 2026
Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime
Low
GHSA-p67v-3w7g-wjg7
was published
for
nokogiri
(RubyGems)
Jun 19, 2026
Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type
Low
GHSA-wjv4-x9w8-wm3h
was published
for
nokogiri
(RubyGems)
Jun 19, 2026
Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`
Moderate
GHSA-5prr-v3j2-97mh
was published
for
nokogiri
(RubyGems)
Jun 19, 2026
Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes
Low
GHSA-9cv2-cfxc-v4v2
was published
for
nokogiri
(RubyGems)
Jun 19, 2026
Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception
Low
GHSA-5v8h-3h3q-446p
was published
for
nokogiri
(RubyGems)
Jun 19, 2026
ProTip!
Advisories are also available from the
GraphQL API