Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,475
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,144
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

7,287 advisories

Loading
In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free.... Critical Unreviewed
CVE-2026-0163 was published Aug 4, 2026
A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly... High Unreviewed
CVE-2026-56848 was published Aug 4, 2026
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code... High Unreviewed
CVE-2026-66315 was published Aug 4, 2026
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a... High Unreviewed
CVE-2026-62870 was published Aug 4, 2026
AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response) High
CVE-2026-69244 was published for aiohttp (pip) Aug 3, 2026
agners Credited to agners and bdraco bdraco bdraco
In display, there is a possible memory corruption due to use after free. This could lead to local... Moderate Unreviewed
CVE-2026-20473 was published Aug 3, 2026
FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message... High Unreviewed
CVE-2026-67299 was published Aug 1, 2026
FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async... High Unreviewed
CVE-2026-67300 was published Aug 1, 2026
A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow... High Unreviewed
CVE-2026-63035 was published Jul 31, 2026
An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote... Moderate Unreviewed
CVE-2026-13117 was published Jul 30, 2026
sqlite 3.41 is vulnerable to use after free in the json.c jsonCacheInsert function of the JSON... Critical Unreviewed
CVE-2026-51291 was published Jul 30, 2026
SQLite 3.41 has a use-after-free vulnerability in the shared cache lock management logic of the... Critical Unreviewed
CVE-2026-51290 was published Jul 30, 2026
MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure Low
CVE-2026-54522 was published for msgpack (RubyGems) Jul 30, 2026
pranjalithakur Credited to pranjalithakur
Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to... High Unreviewed
CVE-2026-18012 was published Jul 30, 2026
Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to... High Unreviewed
CVE-2026-18017 was published Jul 30, 2026
Use after free in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote... High Unreviewed
CVE-2026-17967 was published Jul 30, 2026
Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had... Critical Unreviewed
CVE-2026-17924 was published Jul 30, 2026
Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local... Moderate Unreviewed
CVE-2026-17932 was published Jul 30, 2026
Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to... Critical Unreviewed
CVE-2026-17947 was published Jul 30, 2026
Use after free in Views in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote... High Unreviewed
CVE-2026-17894 was published Jul 30, 2026
Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to... High Unreviewed
CVE-2026-17918 was published Jul 30, 2026
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a... High Unreviewed
CVE-2026-17920 was published Jul 30, 2026
Integer overflow in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to... High Unreviewed
CVE-2026-17881 was published Jul 30, 2026
Use after free in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to... High Unreviewed
CVE-2026-17886 was published Jul 30, 2026
Use after free in TabStrip in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who... High Unreviewed
CVE-2026-17887 was published Jul 30, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database