Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,475
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,144
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

7,285 advisories

Loading
A use after free issue was addressed with improved memory management. This issue is fixed in iOS... Critical Unreviewed
CVE-2026-43814 was published Jul 27, 2026
A use after free issue was addressed with improved memory management. This issue is fixed in iOS... Critical Unreviewed
CVE-2026-43799 was published Jul 27, 2026
A use after free issue was addressed with improved memory management. This issue is fixed in iOS... Critical Unreviewed
CVE-2026-43778 was published Jul 27, 2026
A use after free issue was addressed with improved memory management. This issue is fixed in iOS... Critical Unreviewed
CVE-2026-28928 was published Jul 27, 2026
sqlite 3.41 has a use-after-free (UAF) vulnerability in the ORDER BY clause parsing routine. The... High Unreviewed
CVE-2026-51304 was published Jul 27, 2026
sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing... Moderate Unreviewed
CVE-2026-51298 was published Jul 27, 2026
A use-after-free (UAF) vulnerability was discovered in the core parsing component of SQLite 3.41.... Critical Unreviewed
CVE-2026-51303 was published Jul 27, 2026
sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can... High Unreviewed
CVE-2026-51297 was published Jul 27, 2026
SQLite 3.41 has a use-after-free vulnerability in jsonRemoveFunc of SQLite JSON module. The... High Unreviewed
CVE-2026-51296 was published Jul 27, 2026
A use-after-free vulnerability exists in the expression parsing and memory management logic of... Critical Unreviewed
CVE-2026-51300 was published Jul 27, 2026
SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The... Critical Unreviewed
CVE-2026-51302 was published Jul 27, 2026
ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails Low
GHSA-qvxh-prvr-85w2 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
RigelYoung Credited to RigelYoung
ImageMagick: Use-After-Free when freetype initialization fails Low
GHSA-6jwg-7q3p-5fqm was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
RigelYoung Credited to RigelYoung
ImageMagick: Heap-use-after-free via XMP profile could result in a crash Low
GHSA-qh5g-q395-cx4j was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
ImageMagick: Use-After-Free in crafted 8BIM when identifying an image Moderate
CVE-2026-55510 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Serotav Credited to Serotav
Software installed and run as a non-privileged user may conduct improper GPU system calls to... High Unreviewed
CVE-2026-49743 was published Jul 24, 2026
Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who... High Unreviewed
CVE-2026-16804 was published Jul 24, 2026
Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to... High Unreviewed
CVE-2026-16805 was published Jul 24, 2026
Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to... High Unreviewed
CVE-2026-16806 was published Jul 24, 2026
An authenticated user with read access can cause the mongod process to be terminated through... High Unreviewed
CVE-2026-13071 was published Jul 22, 2026
In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over... Moderate Unreviewed
CVE-2026-50046 was published Jul 22, 2026
In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64... Moderate Unreviewed
CVE-2026-52863 was published Jul 22, 2026
Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who... High Unreviewed
CVE-2026-16423 was published Jul 22, 2026
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote... Critical Unreviewed
CVE-2026-16424 was published Jul 22, 2026
A flaw was found in libssh. If data packets are processed after a channel is closed, channel data... Moderate Unreviewed
CVE-2026-59850 was published Jul 21, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database