Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,508
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

2,381 advisories

Loading
A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous... Moderate Unreviewed
CVE-2026-9030 was published Aug 7, 2026
llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the... High Unreviewed
CVE-2026-70640 was published Aug 7, 2026
llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the... Critical Unreviewed
CVE-2026-43631 was published Aug 7, 2026
Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local... High Unreviewed
CVE-2026-19139 was published Aug 7, 2026
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition... Moderate Unreviewed
CVE-2026-47620 was published Aug 4, 2026
A race condition exists in the cloud-based Omada device adoption process when an attacker may be... Moderate Unreviewed
CVE-2025-15630 was published Aug 3, 2026
An unauthenticated remote attacker can trigger a firmware update download via the OCPP backend by... Moderate Unreviewed
CVE-2026-44102 was published Jul 30, 2026
Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in... High Unreviewed
CVE-2026-16727 was published Jul 30, 2026
Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary... High Unreviewed
CVE-2026-17979 was published Jul 30, 2026
Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to... High Unreviewed
CVE-2026-17993 was published Jul 30, 2026
Race in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote... Moderate Unreviewed
CVE-2026-17999 was published Jul 30, 2026
Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had... Critical Unreviewed
CVE-2026-17855 was published Jul 30, 2026
Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker... Moderate Unreviewed
CVE-2026-17822 was published Jul 30, 2026
Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker... Moderate Unreviewed
CVE-2026-17841 was published Jul 30, 2026
Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker... Moderate Unreviewed
CVE-2026-17724 was published Jul 30, 2026
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who... Critical Unreviewed
CVE-2026-17709 was published Jul 30, 2026
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who... Critical Unreviewed
CVE-2026-17711 was published Jul 30, 2026
Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute... High Unreviewed
CVE-2026-17712 was published Jul 30, 2026
Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to... High Unreviewed
CVE-2026-17654 was published Jul 30, 2026
Missing mutex synchronization in AudioBuffer::freeSpace() in schreibfaul1 ESP32-audioI2S 3.4.5... Critical Unreviewed
CVE-2026-51261 was published Jul 28, 2026
Accessing the vNUMA configuration data of a guest is still possible when domain destruction has... Moderate Unreviewed
CVE-2026-62429 was published Jul 28, 2026
Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen... High Unreviewed
CVE-2026-62430 was published Jul 28, 2026
The EVTCHNOP_expand_array hypercall checks for whether FIFO event channels are enabled, but... High Unreviewed
CVE-2026-62432 was published Jul 28, 2026
[This CNA information record relates to multiple CVEs; the text explains which aspects... Moderate Unreviewed
CVE-2026-62435 was published Jul 28, 2026
[This CNA information record relates to multiple CVEs; the text explains which aspects... Moderate Unreviewed
CVE-2026-62436 was published Jul 28, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database