Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
50
GitHub Actions
50
Go
3,673
Maven
5,000+
npm
5,000+
NuGet
932
pip
4,891
Pub
13
RubyGems
1,051
Rust
1,315
Swift
53
Unreviewed advisories
All unreviewed
5,000+

772 advisories

Loading
Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This... Critical Unreviewed
CVE-2026-7321 was published Apr 28, 2026
The obsolete nis_local_principal function in the GNU C Library version 2.43 and older may... Critical Unreviewed
CVE-2026-5358 was published Apr 20, 2026
owntone-server 2ca10d9 is vulnerable to Buffer Overflow due to lack of recursive checking. Critical Unreviewed
CVE-2025-44560 was published Apr 10, 2026
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor... Critical Unreviewed
CVE-2025-52908 was published Apr 7, 2026
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor... Critical Unreviewed
CVE-2025-52909 was published Apr 7, 2026
Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and... Critical Unreviewed
CVE-2026-5734 was published Apr 7, 2026
Hirschmann HiSecOS devices versions prior to 05.3.03 contain a buffer overflow vulnerability in... Critical Unreviewed
CVE-2018-25237 was published Apr 4, 2026
An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can... Critical Unreviewed
CVE-2026-34875 was published Apr 1, 2026
TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig... Critical Unreviewed
CVE-2026-31027 was published Apr 1, 2026
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4... Critical Unreviewed
CVE-2026-28858 was published Mar 25, 2026
Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8,... Critical Unreviewed
CVE-2026-4721 was published Mar 24, 2026
Memory safety bugs present in Firefox 148 and Thunderbird 148. Some of these bugs showed evidence... Critical Unreviewed
CVE-2026-4729 was published Mar 24, 2026
Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and... Critical Unreviewed
CVE-2026-4720 was published Mar 24, 2026
Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component.... Critical Unreviewed
CVE-2026-4689 was published Mar 24, 2026
ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function... Critical Unreviewed
CVE-2025-69720 was published Mar 19, 2026
telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local... Critical Unreviewed
CVE-2026-32746 was published Mar 13, 2026
In MM_DATA_IND of cn_NrSmMsgHdlrFromMM.cpp, there is a possible EoP due to memory corruption.... Critical Unreviewed
CVE-2026-0110 was published Mar 10, 2026
In DeviceId of DeviceId.java, there is a possible desync in persistence due to a missing bounds... Critical Unreviewed
CVE-2025-48611 was published Mar 10, 2026
D-link Dir-513 A1FW110 is vulnerable to Buffer Overflow in the function formTcpipSetup. Critical Unreviewed
CVE-2025-46108 was published Mar 4, 2026
A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0... Critical Unreviewed
CVE-2026-24103 was published Mar 3, 2026
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability... Critical Unreviewed
CVE-2026-24112 was published Mar 2, 2026
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may send overly long ... Critical Unreviewed
CVE-2026-24110 was published Mar 2, 2026
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the sizes of `gstup`... Critical Unreviewed
CVE-2026-24115 was published Mar 2, 2026
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability... Critical Unreviewed
CVE-2026-24108 was published Mar 2, 2026
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability... Critical Unreviewed
CVE-2026-24111 was published Mar 2, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database