Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
55
Go
4,522
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,514
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

380 advisories

Loading
An integer underflow in the volxlate function in Netatalk 3.0.0 through 4.4.2 allows a local... Low Unreviewed
CVE-2026-44069 was published May 21, 2026
An integer underflow in dsi_writeinit() in Netatalk 1.5.0 through 4.4.2 allows a remote... High Unreviewed
CVE-2026-44060 was published May 21, 2026
iskorotkov/avro: Integer Overflow in Decoder High
CVE-2026-46384 was published for github.com/iskorotkov/avro/v2 (Go) May 18, 2026
klajok Credited to klajok
ImageMagick: Heap Buffer Over-Read in IPTC encoder Moderate
CVE-2026-42326 was published for Magick.NET-Q16-AnyCPU (NuGet) May 18, 2026
sukhoon0975 Credited to sukhoon0975
CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Integer Underflow ... Moderate Unreviewed
CVE-2026-34672 was published May 12, 2026
CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Integer Underflow ... Moderate Unreviewed
CVE-2026-34667 was published May 12, 2026
Integer underflow (wrap or wraparound) in Windows Common Log File System Driver allows an... High Unreviewed
CVE-2026-40397 was published May 12, 2026
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort... Moderate Unreviewed
CVE-2026-43359 was published May 8, 2026
In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5:... Moderate Unreviewed
CVE-2026-43301 was published May 8, 2026
In the Linux kernel, the following vulnerability has been resolved: xfs: delete attr leaf... High Unreviewed
CVE-2026-43187 was published May 6, 2026
An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a... High Unreviewed
CVE-2026-37459 was published May 4, 2026
GoBGP has an Integer Underflow Issue Moderate
CVE-2026-7736 was published for github.com/osrg/gobgp/v4 (Go) May 4, 2026
Integer underflow vulnerability in Open-SAE-J1939 thru commit... Critical Unreviewed
CVE-2026-37534 was published May 1, 2026
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero... High Unreviewed
CVE-2026-33845 was published Apr 30, 2026
Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of... High Unreviewed
CVE-2026-6914 was published Apr 29, 2026
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of... Moderate Unreviewed
CVE-2026-40356 was published Apr 28, 2026
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: fix refcount... High Unreviewed
CVE-2026-31656 was published Apr 24, 2026
In the Linux kernel, the following vulnerability has been resolved: tipc: fix bc_ackers... High Unreviewed
CVE-2026-31662 was published Apr 24, 2026
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: validate... Moderate Unreviewed
CVE-2026-31617 was published Apr 24, 2026
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix... Moderate Unreviewed
CVE-2026-31551 was published Apr 24, 2026
A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the... High Unreviewed
CVE-2026-33999 was published Apr 23, 2026
nimiq-account: Vesting insufficient funds error can panic Moderate
CVE-2026-34064 was published for nimiq-account (Rust) Apr 22, 2026
1seal Credited to 1seal and paberr paberr paberr
MsQuic has a Remote Elevation of Privilege Vulnerability Critical
CVE-2026-32179 was published for Microsoft.Native.Quic.MsQuic.OpenSSL (NuGet) Apr 16, 2026
Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or... High Unreviewed
CVE-2026-27296 was published Apr 15, 2026
Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or... High Unreviewed
CVE-2026-27297 was published Apr 15, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database