Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,538
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,516
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

47 advisories

Loading
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges()... Moderate Unreviewed
CVE-2026-77014 was published Aug 20, 2026
nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An... Low Unreviewed
CVE-2026-65610 was published Aug 19, 2026
COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c... High Unreviewed
CVE-2026-73523 was published Aug 17, 2026
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Moderate Unreviewed
CVE-2026-65798 was published Aug 11, 2026
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code... High Unreviewed
CVE-2026-63525 was published Aug 11, 2026
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to... High Unreviewed
CVE-2026-62698 was published Aug 11, 2026
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose... Moderate Unreviewed
CVE-2026-55142 was published Jul 14, 2026
Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to... High Unreviewed
CVE-2026-50357 was published Jul 14, 2026
Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to... High Unreviewed
CVE-2026-49792 was published Jul 14, 2026
LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow... Moderate Unreviewed
CVE-2026-6039 was published Jun 15, 2026
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker... High Unreviewed
CVE-2026-44823 was published Jun 9, 2026
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability High Unreviewed
CVE-2026-40409 was published Jun 9, 2026
NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in... High Unreviewed
CVE-2026-42944 was published May 20, 2026
In uriparser before 1.0.2, there is pointer difference truncation to int in various places. Low Unreviewed
CVE-2026-44927 was published May 8, 2026
uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts... Moderate Unreviewed
CVE-2026-42371 was published Apr 27, 2026
Eclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytes Moderate
CVE-2025-10543 was published for github.com/eclipse/paho.mqtt.golang (Go) Dec 2, 2025
SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite High
CVE-2025-6965 was published for SQLitePCLRaw.lib.e_sqlite3 (NuGet) Jul 15, 2025
ericsink Credited to ericsink
Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges... High Unreviewed
CVE-2025-49679 was published Jul 8, 2025
Windows Kerberos Remote Code Execution Vulnerability Critical Unreviewed
CVE-2024-43639 was published Nov 12, 2024
SQL Server Native Client Remote Code Execution Vulnerability High Unreviewed
CVE-2024-49018 was published Nov 12, 2024
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability High Unreviewed
CVE-2024-43519 was published Oct 8, 2024
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability High Unreviewed
CVE-2024-37337 was published Sep 10, 2024
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-38125 was published Aug 13, 2024
Azure Kinect SDK Remote Code Execution Vulnerability Moderate Unreviewed
CVE-2024-38086 was published Jul 9, 2024
DHCP Server Service Remote Code Execution Vulnerability High Unreviewed
CVE-2024-38044 was published Jul 9, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database