Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,845
Maven
5,000+
npm
5,000+
NuGet
1,131
pip
5,000+
Pub
13
RubyGems
1,158
Rust
1,578
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20

5,203 advisories

Loading
An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL... High Unreviewed
CVE-2026-8619 was published Aug 20, 2026
CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Moderate Unreviewed
CVE-2026-76881 was published Aug 20, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of... Moderate Unreviewed
CVE-2026-16829 was published Aug 19, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of... Moderate Unreviewed
CVE-2026-16846 was published Aug 19, 2026
Tapo C100/C101 V5 contains a null pointer dereference vulnerability in the RTSP service. An... High Unreviewed
CVE-2026-75618 was published Aug 19, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of... High Unreviewed
CVE-2026-16817 was published Aug 19, 2026
A flaw was found in mod_cluster's AdvertiseListenerImpl (org.jboss.modcluster core module). A... Moderate Unreviewed
CVE-2026-76166 was published Aug 19, 2026
resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read Critical
CVE-2026-55209 was published for resdata (pip) Aug 18, 2026
oddmunds Credited to oddmunds
Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this... Moderate Unreviewed
CVE-2026-58560 was published Aug 17, 2026
Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this... Moderate Unreviewed
CVE-2026-58561 was published Aug 17, 2026
CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure... Moderate Unreviewed
CVE-2026-55401 was published Aug 13, 2026
An issue in MongoDB Server's query planner could allow an authenticated user with read-level... Moderate Unreviewed
CVE-2026-18699 was published Aug 11, 2026
Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny... High Unreviewed
CVE-2026-65681 was published Aug 11, 2026
Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny... Moderate Unreviewed
CVE-2026-62702 was published Aug 11, 2026
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to... Moderate Unreviewed
CVE-2026-61345 was published Aug 11, 2026
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to... Moderate Unreviewed
CVE-2026-59138 was published Aug 11, 2026
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a... High Unreviewed
CVE-2026-59132 was published Aug 11, 2026
CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result... High Unreviewed
CVE-2026-48438 was published Aug 11, 2026
Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring... High Unreviewed
CVE-2026-20787 was published Aug 11, 2026
Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring... High Unreviewed
CVE-2026-20878 was published Aug 11, 2026
Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring... High Unreviewed
CVE-2026-20727 was published Aug 11, 2026
Any authenticated Velociraptor user — including one holding only the readerrole — can terminate... Moderate Unreviewed
CVE-2026-18638 was published Aug 11, 2026
A NULL pointer vulnerability has been found in the the shim application of dp.c library. A... Low Unreviewed
CVE-2026-19411 was published Aug 10, 2026
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference... Moderate Unreviewed
CVE-2026-71967 was published Aug 10, 2026
A NULL pointer dereference vulnerability in fastschema through v0.15.1 allows an unauthenticated... High Unreviewed
CVE-2026-72582 was published Aug 10, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database