Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
45
GitHub Actions
47
Go
3,309
Maven
5,000+
npm
5,000+
NuGet
876
pip
4,531
Pub
12
RubyGems
1,009
Rust
1,195
Swift
51
Unreviewed advisories
All unreviewed
5,000+

826 advisories

Loading
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe... Moderate Unreviewed
CVE-2026-28841 was published Mar 25, 2026
XnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun via a crafted .tiff file. Moderate Unreviewed
CVE-2026-30006 was published Mar 23, 2026
In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check.... Moderate Unreviewed
CVE-2026-20436 was published Mar 2, 2026
strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the... Moderate Unreviewed
CVE-2025-61147 was published Feb 23, 2026
ScadaApp for iOS 1.1.4.0 contains a denial of service vulnerability that allows attackers to... Moderate Unreviewed
CVE-2019-25349 was published Feb 19, 2026
Foscam Video Management System 1.1.4.9 contains a denial of service vulnerability in the username... Moderate Unreviewed
CVE-2019-25353 was published Feb 19, 2026
iSmartViewPro 1.3.34 contains a denial of service vulnerability that allows attackers to crash... Moderate Unreviewed
CVE-2019-25354 was published Feb 19, 2026
ipPulse 1.92 contains a denial of service vulnerability that allows local attackers to crash the... Moderate Unreviewed
CVE-2019-25326 was published Feb 19, 2026
IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to... Moderate Unreviewed
CVE-2025-33130 was published Feb 17, 2026
MSN Password Recovery version 1.30 contains a denial of service vulnerability that allows... Moderate Unreviewed
CVE-2020-37215 was published Feb 11, 2026
TextCrawler Pro 3.1.1 contains a denial of service vulnerability that allows attackers to crash... Moderate Unreviewed
CVE-2020-37213 was published Feb 11, 2026
SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the... Moderate Unreviewed
CVE-2020-37211 was published Feb 11, 2026
SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows... Moderate Unreviewed
CVE-2020-37210 was published Feb 11, 2026
SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field... Moderate Unreviewed
CVE-2020-37209 was published Feb 11, 2026
SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field... Moderate Unreviewed
CVE-2020-37212 was published Feb 11, 2026
GTalk Password Finder 2.2.1 contains a denial of service vulnerability that allows attackers to... Moderate Unreviewed
CVE-2020-37180 was published Feb 11, 2026
SpotDialup 1.6.7 contains a denial of service vulnerability in the registration name input field... Moderate Unreviewed
CVE-2020-37187 was published Feb 11, 2026
Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows... Moderate Unreviewed
CVE-2020-37190 was published Feb 11, 2026
ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to... Moderate Unreviewed
CVE-2020-37193 was published Feb 11, 2026
NetworkSleuth 3.0.0.0 contains a denial of service vulnerability that allows attackers to crash... Moderate Unreviewed
CVE-2020-37202 was published Feb 11, 2026
Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to... Moderate Unreviewed
CVE-2020-37194 was published Feb 11, 2026
Top Password Software Dialup Password Recovery 1.30 contains a denial of service vulnerability... Moderate Unreviewed
CVE-2020-37191 was published Feb 11, 2026
BlueAuditor 1.7.2.0 contains a denial of service vulnerability in the registration name input... Moderate Unreviewed
CVE-2020-37195 was published Feb 11, 2026
SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field... Moderate Unreviewed
CVE-2020-37188 was published Feb 11, 2026
Office Product Key Finder 1.5.4 contains a denial of service vulnerability that allows attackers... Moderate Unreviewed
CVE-2020-37203 was published Feb 11, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database