Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

783 advisories

Loading
DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that... Critical Unreviewed
CVE-2026-9698 was published Jun 9, 2026
Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd. Tenda A18 v.15.13... Critical Unreviewed
CVE-2026-51934 was published Sep 1, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary... Critical Unreviewed
CVE-2026-17040 was published Aug 21, 2026
Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to... Critical Unreviewed
CVE-2026-39255 was published Aug 17, 2026
Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to... Critical Unreviewed
CVE-2026-39254 was published Aug 17, 2026
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.5.2... Critical Unreviewed
CVE-2026-43807 was published Jul 27, 2026
The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the... Critical Unreviewed
CVE-2025-41769 was published Aug 12, 2026
An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2... Critical Unreviewed
CVE-2021-45971 was published Feb 9, 2022
An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2... Critical Unreviewed
CVE-2021-45969 was published Feb 9, 2022
An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2... Critical Unreviewed
CVE-2021-45970 was published Feb 10, 2022
D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044... Critical Unreviewed
CVE-2026-71958 was published Aug 8, 2026
D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044... Critical Unreviewed
CVE-2026-71957 was published Aug 8, 2026
schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder:... Critical Unreviewed
CVE-2026-51252 was published Jul 28, 2026
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe... Critical Unreviewed
CVE-2026-64691 was published Jul 27, 2026
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS... Critical Unreviewed
CVE-2026-43750 was published Jul 27, 2026
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6... Critical Unreviewed
CVE-2026-28931 was published Jul 27, 2026
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS... Critical Unreviewed
CVE-2026-64767 was published Jul 27, 2026
Buffer Overflow vulnerability in Tenda AC10 v3 (firmware V03.03.16.09) allows attackers to cause... Critical Unreviewed
CVE-2026-51380 was published Jul 15, 2026
Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute... Critical Unreviewed
CVE-2026-51808 was published Jul 15, 2026
A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1... Critical Unreviewed
CVE-2025-11698 was published Jul 14, 2026
Issue summary: Parsing CMS AuthEnvelopedData message with maliciously crafted AEAD parameters can... Critical Unreviewed
CVE-2025-15467 was published Jan 27, 2026
A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could... Critical Unreviewed
CVE-2025-12012 was published Jul 14, 2026
A denial-of-service issue exists in  5370/5570 controllers. This vulnerability could potentially... Critical Unreviewed
CVE-2025-12011 was published Jul 14, 2026
zlib versions up to and including 1.3.1.2 contain a global buffer overflow in the untgz utility.... Critical Unreviewed
CVE-2026-22184 was published Jan 7, 2026
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c... Critical Unreviewed
CVE-2022-37434 was published Aug 6, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database