Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
55
Go
4,522
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,514
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

380 advisories

Loading
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary... Low Unreviewed
CVE-2026-16241 was published Aug 13, 2026
A flaw was found in open-iscsi. An integer underflow vulnerability in the `iscsiuio` component,... Moderate Unreviewed
CVE-2026-18728 was published Aug 13, 2026
A flaw was found in open-iscsi's iscsiuio component. This vulnerability involves an integer... Moderate Unreviewed
CVE-2026-18727 was published Aug 13, 2026
A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an... Moderate Unreviewed
CVE-2026-73433 was published Aug 12, 2026
MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly... High Unreviewed
CVE-2026-18687 was published Aug 11, 2026
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability... Moderate Unreviewed
CVE-2026-71389 was published Aug 11, 2026
Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows... High Unreviewed
CVE-2026-62696 was published Aug 11, 2026
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability... Moderate Unreviewed
CVE-2026-48435 was published Aug 11, 2026
A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer... High Unreviewed
CVE-2026-59090 was published Aug 10, 2026
An integer underflow was found in the popt library when formatting help text for option tables... Low Unreviewed
CVE-2026-18839 was published Aug 5, 2026
The raster Rust crate's crop() function (src/editor.rs) clamps the crop width/height against... High Unreviewed
CVE-2026-71202 was published Aug 5, 2026
Information Disclosure when processing wireless network channel switch information with... Moderate Unreviewed
CVE-2026-24077 was published Aug 4, 2026
FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL... High Unreviewed
CVE-2026-67298 was published Aug 1, 2026
An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a... High Unreviewed
CVE-2026-63362 was published Jul 31, 2026
Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability.... High Unreviewed
CVE-2026-13308 was published Jul 29, 2026
GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS) Moderate
CVE-2026-54345 was published for github.com/gopacket/gopacket (Go) Jul 28, 2026
tonghuaroot Credited to tonghuaroot and mosajjal mosajjal mosajjal
[This CNA information record relates to multiple CVEs; the text explains which aspects... Moderate Unreviewed
CVE-2026-42495 was published Jul 28, 2026
schreibfaul1 ESP32-audioI2S v3.4.5 has an integer underflow vulnerability in the MP3Decoder:... High Unreviewed
CVE-2026-51254 was published Jul 28, 2026
Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS... High Unreviewed
CVE-2026-45813 was published Jul 24, 2026
FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause... High Unreviewed
CVE-2026-65704 was published Jul 23, 2026
CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure... Low Unreviewed
CVE-2026-40954 was published Jul 15, 2026
CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure... Low Unreviewed
CVE-2026-40955 was published Jul 15, 2026
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability... Moderate Unreviewed
CVE-2026-48298 was published Jul 15, 2026
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability... Moderate Unreviewed
CVE-2026-48296 was published Jul 15, 2026
Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to... High Unreviewed
CVE-2026-55011 was published Jul 14, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database