Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,508
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

2,381 advisories

Loading
Concurrent execution using shared resource with improper synchronization ('race condition') in... High Unreviewed
CVE-2026-44800 was published Jul 14, 2026
Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode High
CVE-2026-50013 was published for github.com/SpectoLabs/hoverfly (Go) Jul 14, 2026
Kr1shna4garwal Credited to Kr1shna4garwal
A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')... High Unreviewed
CVE-2026-57030 was published Jul 10, 2026
Race in GetUserMedia in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who had... High Unreviewed
CVE-2026-15119 was published Jul 9, 2026
FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and... High Unreviewed
CVE-2026-56297 was published Jul 8, 2026
@better-auth/oauth-provider's OAuth authorization-code grant allows concurrent redemption when two token requests race the find-then-delete primitive High
CVE-2026-53518 was published for @better-auth/oauth-provider (npm) Jul 7, 2026
chdanielmueller Credited to chdanielmueller
Better Auth: OAuth refresh-token rotation forks the token family on concurrent redemption High
CVE-2026-53517 was published for @better-auth/oauth-provider (npm) Jul 7, 2026
chdanielmueller Credited to chdanielmueller
mkdir: -m exposes directory with umask perms before chmod (race window) Low
CVE-2026-35353 was published for uu_mkdir (Rust) Jul 6, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in... Moderate Unreviewed
CVE-2026-55945 was published Jul 3, 2026
goshs: Share-link ?token=… redemption races past download limit Moderate
CVE-2026-50139 was published for goshs.de/goshs/v2 (Go) Jul 1, 2026
black-shadow-007 Credited to black-shadow-007
SurrealDB: HTTP RPC Session Race Condition Allows Privilege Escalation High
GHSA-4vgr-h27g-cf9p was published for surrealdb (Rust) Jul 1, 2026
addcontent Credited to addcontent
In the Linux kernel, the following vulnerability has been resolved: signal: clear... Moderate Unreviewed
CVE-2026-53352 was published Jul 1, 2026
A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026... High Unreviewed
CVE-2026-5120 was published Jul 1, 2026
Race in History Embeddings in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to... Moderate Unreviewed
CVE-2026-14133 was published Jul 1, 2026
Race in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross... Moderate Unreviewed
CVE-2026-14082 was published Jul 1, 2026
Race in WebRTC in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to... Moderate Unreviewed
CVE-2026-14015 was published Jul 1, 2026
Race in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to... Moderate Unreviewed
CVE-2026-13905 was published Jul 1, 2026
Race in DataTransfer in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain... Moderate Unreviewed
CVE-2026-13874 was published Jul 1, 2026
Race in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised... Critical Unreviewed
CVE-2026-13882 was published Jul 1, 2026
Paymenter has race condition in payWithCredit() that enables credit double-spend Moderate
CVE-2026-55219 was published for paymenter/paymenter (Composer) Jun 30, 2026
debibobo Credited to debibobo and CorwinDev CorwinDev CorwinDev
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2... Moderate Unreviewed
CVE-2026-43743 was published Jun 29, 2026
A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream... Low Unreviewed
CVE-2026-13502 was published Jun 28, 2026
Filament: Multi-factor authentication (app) recovery codes can still be used multiple times via concurrent submission High
CVE-2026-48505 was published for filament/filament (Composer) Jun 25, 2026
StarPlatinu Credited to StarPlatinu and danharrin danharrin danharrin
Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain a Concurrent... Moderate Unreviewed
CVE-2026-46732 was published Jun 25, 2026
In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix unmap race... Moderate Unreviewed
CVE-2026-53108 was published Jun 24, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database