Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,608
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

2,441 advisories

Loading
A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the... Moderate Unreviewed
CVE-2026-82543 was published Aug 30, 2026
A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an... Low Unreviewed
CVE-2026-82364 was published Aug 29, 2026
free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI High
CVE-2026-55784 was published for github.com/free5gc/ausf (Go) Aug 28, 2026
jaimealruiz Credited to jaimealruiz and jav1er8 jav1er8 jav1er8
Concurrent execution using shared resource with improper synchronization ('race condition') in... Moderate Unreviewed
CVE-2026-58616 was published Aug 28, 2026
SvelteKit versions from 2.38.0 before 2.60.1 contain a race condition in query.batch that allows... Moderate Unreviewed
CVE-2026-82258 was published Aug 28, 2026
When an IntegrationFlow uses .fluxTransform() with an asynchronous/reordering fluxFunction that... High Unreviewed
CVE-2026-59324 was published Aug 27, 2026
A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR... Moderate Unreviewed
CVE-2026-59321 was published Aug 27, 2026
Race condition in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a... Moderate Unreviewed
CVE-2026-79117 was published Aug 25, 2026
Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to... Moderate Unreviewed
CVE-2026-79094 was published Aug 25, 2026
Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who... Moderate Unreviewed
CVE-2026-79014 was published Aug 25, 2026
Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote... Moderate Unreviewed
CVE-2026-78979 was published Aug 25, 2026
Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute... High Unreviewed
CVE-2026-78901 was published Aug 25, 2026
Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to... High Unreviewed
CVE-2026-78906 was published Aug 25, 2026
Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an... High Unreviewed
CVE-2026-78915 was published Aug 25, 2026
Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker... High Unreviewed
CVE-2026-78934 was published Aug 25, 2026
Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a... High Unreviewed
CVE-2026-77638 was published Aug 20, 2026
Zoo Design Studio: Memory-corruption in memory handling of lib-kcl Moderate
GHSA-mc9m-6fm9-pghc was published for kcl-lib (pip) Aug 20, 2026
maxammann Credited to maxammann
OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access Moderate
CVE-2026-45404 was published for go.opentelemetry.io/otel/bridge/opentracing (Go) Aug 20, 2026
pellared Credited to pellared and MrAlias MrAlias MrAlias
HCL IntelliOps Event Management (IEM) is affected by a race condition. A "timing window" can... Moderate Unreviewed
CVE-2025-62300 was published Aug 20, 2026
In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model... Moderate Unreviewed
CVE-2026-76393 was published Aug 20, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in... High Unreviewed
CVE-2026-62727 was published Aug 19, 2026
Race condition in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote... High Unreviewed
CVE-2026-19506 was published Aug 19, 2026
The ELF core dump code counted the number of dumpable VM map entries, allocated a buffer for the... High Unreviewed
CVE-2026-58088 was published Aug 19, 2026
Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154... Moderate Unreviewed
CVE-2026-74984 was published Aug 18, 2026
Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox... Moderate Unreviewed
CVE-2026-74973 was published Aug 18, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database