Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

3,633 advisories

Loading
Buffer Overflow vulnerability in Tenda AC10 v3 (firmware V03.03.16.09) allows attackers to cause... Critical Unreviewed
CVE-2026-51380 was published Jul 15, 2026
Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of... Moderate Unreviewed
CVE-2026-58553 was published Jul 15, 2026
Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of... Moderate Unreviewed
CVE-2026-58550 was published Jul 15, 2026
Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of... Moderate Unreviewed
CVE-2026-58552 was published Jul 15, 2026
Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of... Moderate Unreviewed
CVE-2026-58551 was published Jul 15, 2026
Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of... Moderate Unreviewed
CVE-2026-58549 was published Jul 15, 2026
Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute... Critical Unreviewed
CVE-2026-51808 was published Jul 15, 2026
A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1... Critical Unreviewed
CVE-2025-11698 was published Jul 14, 2026
A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could... Critical Unreviewed
CVE-2025-12012 was published Jul 14, 2026
A denial-of-service issue exists in  5370/5570 controllers. This vulnerability could potentially... Critical Unreviewed
CVE-2025-12011 was published Jul 14, 2026
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in SUSE... Low Unreviewed
CVE-2025-8412 was published Jul 14, 2026
U-Boot through 2026.04-rc3 contains a buffer overflow vulnerability in nfs_readlink_reply() (net... High Unreviewed
CVE-2026-29009 was published Jul 8, 2026
When dealing with abnormally constructed objects, there is a lack of argument validation;... High Unreviewed
CVE-2026-57246 was published Jul 8, 2026
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated... High Unreviewed
CVE-2026-8247 was published Jul 3, 2026
Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker... High Unreviewed
CVE-2026-52191 was published Jul 2, 2026
Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker... High Unreviewed
CVE-2026-52189 was published Jul 2, 2026
Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker... High Unreviewed
CVE-2026-52187 was published Jul 2, 2026
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)... High Unreviewed
CVE-2026-57275 was published Jul 2, 2026
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)... High Unreviewed
CVE-2026-57273 was published Jul 2, 2026
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)... High Unreviewed
CVE-2026-57276 was published Jul 2, 2026
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)... High Unreviewed
CVE-2026-57274 was published Jul 2, 2026
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)... High Unreviewed
CVE-2026-57278 was published Jul 2, 2026
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)... High Unreviewed
CVE-2026-57277 was published Jul 2, 2026
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote... High Unreviewed
CVE-2026-20217 was published Jul 1, 2026
A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote... High Unreviewed
CVE-2026-20243 was published Jul 1, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database