Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
37
GitHub Actions
36
Go
2,494
Maven
5,000+
npm
4,129
NuGet
735
pip
3,944
Pub
12
RubyGems
945
Rust
1,025
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

151 advisories

Loading
Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault... Moderate Unreviewed
CVE-2025-40929 was published Sep 8, 2025
FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka... Moderate Unreviewed
CVE-2025-40907 was published May 16, 2025
In syna_cdev_ioctl_store_pid() of syna_tcm2_sysfs.c, there is a possible out of bounds write due... Moderate Unreviewed
CVE-2025-36902 was published Sep 4, 2025
Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this... Moderate Unreviewed
CVE-2025-5942 was published Aug 14, 2025
Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability.... Moderate Unreviewed
CVE-2023-32157 was published May 3, 2024
:Vulnerability of insufficient data length verification in the DFA module. Impact: Successful... Moderate Unreviewed
CVE-2025-54630 was published Aug 6, 2025
An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated... Moderate Unreviewed
CVE-2025-3277 was published Apr 14, 2025
Tenda AC8V4 V16.03.34.06` was discovered to contain heap overflow at /goform/GetParentControlInfo... Moderate Unreviewed
CVE-2025-51089 was published Jul 24, 2025
NanoMQ v0.22.10 was discovered to contain a heap overflow which allows attackers to cause a... Moderate Unreviewed
CVE-2024-42648 was published Jul 14, 2025
A heap-based buffer overflow in Fortinet FortiOS versions 7.6.0 through 7.6.2, 7.4.0 through 7.4... Moderate Unreviewed
CVE-2025-24477 was published Jul 15, 2025
Heap-based Buffer Overflow vulnerability in Apache ORC. A vulnerability has been identified in... Moderate Unreviewed
CVE-2025-47436 was published May 14, 2025
Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb. Moderate Unreviewed
CVE-2024-45993 was published Sep 30, 2024
A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing... Moderate Unreviewed
CVE-2025-32990 was published Jul 10, 2025
For Realtek AmebaD devices, a heap-based buffer overflow was discovered in Ameba-AIoT ameba... Moderate Unreviewed
CVE-2025-49604 was published Jul 9, 2025
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation... Moderate Unreviewed
CVE-2025-53184 was published Jul 7, 2025
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation... Moderate Unreviewed
CVE-2025-53183 was published Jul 7, 2025
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation... Moderate Unreviewed
CVE-2025-53181 was published Jul 7, 2025
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation... Moderate Unreviewed
CVE-2025-53180 was published Jul 7, 2025
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation... Moderate Unreviewed
CVE-2025-53182 was published Jul 7, 2025
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation... Moderate Unreviewed
CVE-2025-53179 was published Jul 7, 2025
WINSTAR WN572HP3 v230525 was discovered to contain a heap overflow via the CONTENT_LENGTH... Moderate Unreviewed
CVE-2025-45029 was published Jul 2, 2025
Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier... Moderate Unreviewed
CVE-2025-50054 was published Jun 20, 2025
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow... Moderate Unreviewed
CVE-2025-47815 was published May 11, 2025
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow... Moderate Unreviewed
CVE-2025-47814 was published May 11, 2025
Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5... Moderate Unreviewed
CVE-2013-7353 was published May 17, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database