Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,508
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

2,381 advisories

Loading
In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix racing... Critical Unreviewed
CVE-2026-53086 was published Jun 24, 2026
In the Linux kernel, the following vulnerability has been resolved: quota: Fix race of... High Unreviewed
CVE-2026-53050 was published Jun 24, 2026
In the Linux kernel, the following vulnerability has been resolved: ice: fix race condition in... Moderate Unreviewed
CVE-2026-53008 was published Jun 24, 2026
In the Linux kernel, the following vulnerability has been resolved: um: Fix potential race... High Unreviewed
CVE-2026-53020 was published Jun 24, 2026
In the Linux kernel, the following vulnerability has been resolved: sched/psi: fix race between... High Unreviewed
CVE-2026-52991 was published Jun 24, 2026
OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination High
CVE-2026-48708 was published for github.com/OliveTin/OliveTin (Go) Jun 24, 2026
knight-yagami Credited to knight-yagami
CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution Moderate
CVE-2026-54778 was published for CoreWCF.UnixDomainSocket (NuGet) Jun 19, 2026
HVM guest I/O port accesses are subject to either emulation or at least translation. ... High Unreviewed
CVE-2026-42487 was published Jun 18, 2026
Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had... High Unreviewed
CVE-2026-12468 was published Jun 17, 2026
Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker... High Unreviewed
CVE-2026-12454 was published Jun 17, 2026
In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition.... Critical Unreviewed
CVE-2026-0083 was published Jun 17, 2026
In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a... Critical Unreviewed
CVE-2026-0068 was published Jun 17, 2026
An authentication bypass security issue exists within FactoryTalk Historian Site Edition. By... Critical Unreviewed
CVE-2025-13036 was published Jun 16, 2026
The Iptanus File Upload WordPress plugin before 5.1.7 does not implement proper file handling... Moderate Unreviewed
CVE-2025-15546 was published Jun 14, 2026
A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method.... High Unreviewed
CVE-2026-54229 was published Jun 13, 2026
PyO3 has a missing `Sync` bound on `PyCFunction::new_closure` closures Moderate
GHSA-chgr-c6px-7xpp was published for pyo3 (Rust) Jun 12, 2026
gorest InMemorySecret2FA race condition allows process crash via concurrent map access (CWE-362) Moderate
CVE-2026-48154 was published for github.com/pilinux/gorest (Go) Jun 12, 2026
Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker... High Unreviewed
CVE-2026-12022 was published Jun 12, 2026
A malicious application may cause unexpected changes in memory shared between processes. A memory... High Unreviewed
CVE-2022-26758 was published Jun 11, 2026
Race in V8 in Google Chrome prior to 144.0.7559.99 allowed a remote attacker to potentially... High Unreviewed
CVE-2026-1220 was published Jun 10, 2026
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to... High Unreviewed
CVE-2026-45601 was published Jun 9, 2026
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to... High Unreviewed
CVE-2026-45603 was published Jun 9, 2026
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to... High Unreviewed
CVE-2026-45596 was published Jun 9, 2026
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to... High Unreviewed
CVE-2026-45598 was published Jun 9, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in UI... High Unreviewed
CVE-2026-45597 was published Jun 9, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database