Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,508
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

727 advisories

Loading
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix a BUG in... Moderate Unreviewed
CVE-2025-71080 was published Jan 13, 2026
In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in... Moderate Unreviewed
CVE-2025-71085 was published Jan 13, 2026
In Modem, there is a possible system crash due to incorrect error handling. This could lead to... High Unreviewed
CVE-2025-20762 was published Jan 6, 2026
In Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This... High Unreviewed
CVE-2025-20760 was published Jan 6, 2026
A flaw has been found in Open5GS up to 2.7.5. This affects the function decode_ipv6_header... Moderate Unreviewed
CVE-2025-15176 was published Dec 29, 2025
Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join)... Moderate Unreviewed
CVE-2025-49088 was published Dec 25, 2025
Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a... High Unreviewed
CVE-2025-66379 was published Dec 25, 2025
Pexip Infinity 33.0 through 37.0 before 37.1 has improper input validation in signaling that... High Unreviewed
CVE-2025-32096 was published Dec 25, 2025
Pexip Infinity 35.0 through 37.2 before 38.0 has Improper Input Validation in signalling that... High Unreviewed
CVE-2025-48704 was published Dec 25, 2025
Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media... High Unreviewed
CVE-2025-66443 was published Dec 25, 2025
Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote... High Unreviewed
CVE-2025-32095 was published Dec 25, 2025
wb2osz/direwolf (Dire Wolf) versions up to and including 1.8, prior to commit 3658a87, contain a... High Unreviewed
CVE-2025-34458 was published Dec 23, 2025
A vulnerability has been found in Open5GS up to 2.7.5. Affected is the function... Moderate Unreviewed
CVE-2025-14954 was published Dec 19, 2025
An issue was discovered in Open5GS 2.7.5-49-g465e90f, when processing a PFCP Session... High Unreviewed
CVE-2025-65559 was published Dec 18, 2025
An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them... Moderate Unreviewed
CVE-2025-59029 was published Dec 9, 2025
In Modem, there is a possible system crash due to incorrect error handling. This could lead to... Moderate Unreviewed
CVE-2025-20791 was published Dec 2, 2025
In Modem, there is a possible system crash due to improper input validation. This could lead to... Moderate Unreviewed
CVE-2025-20792 was published Dec 2, 2025
In Modem, there is a possible system crash due to improper input validation. This could lead to... Moderate Unreviewed
CVE-2025-20757 was published Dec 2, 2025
In Modem, there is a possible system crash due to a missing bounds check. This could lead to... Moderate Unreviewed
CVE-2025-20752 was published Dec 2, 2025
MongoDB Server may experience an invariant failure during batched delete operations when handling... High Unreviewed
CVE-2025-13644 was published Nov 25, 2025
Free5GC is vulnerable to DoS through its Npcf_BDTPolicyControl POST API Moderate
CVE-2025-60632 was published for github.com/free5gc/pcf (Go) Nov 24, 2025
golang.org/x/crypto/ssh/agent has a potential denial of service High
CVE-2025-47913 was published for golang.org/x/crypto/ssh/agent (Go) Nov 14, 2025
augustocesarperin Credited to augustocesarperin
A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr&#39... Critical Unreviewed
CVE-2025-46705 was published Nov 5, 2025
Transient DOS when a remote device sends an invalid connection request during BT connectable LE... Moderate Unreviewed
CVE-2025-47370 was published Nov 4, 2025
Reachable Assertion vulnerability in Open5GS up to version 2.7.5 allows attackers with... High Unreviewed
CVE-2025-41068 was published Oct 27, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database