Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,475
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,144
Rust
1,510
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

7,279 advisories

Loading
In display, there is a possible memory corruption due to use after free. This could lead to local... Unknown Unreviewed
CVE-2026-20473 was published Aug 3, 2026
FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message... High Unreviewed
CVE-2026-67299 was published Aug 1, 2026
FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async... High Unreviewed
CVE-2026-67300 was published Aug 1, 2026
A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow... High Unreviewed
CVE-2026-63035 was published Jul 31, 2026
An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote... Moderate Unreviewed
CVE-2026-13117 was published Jul 30, 2026
sqlite 3.41 is vulnerable to use after free in the json.c jsonCacheInsert function of the JSON... Critical Unreviewed
CVE-2026-51291 was published Jul 30, 2026
SQLite 3.41 has a use-after-free vulnerability in the shared cache lock management logic of the... Critical Unreviewed
CVE-2026-51290 was published Jul 30, 2026
MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure Low
CVE-2026-54522 was published for msgpack (RubyGems) Jul 30, 2026
pranjalithakur Credited to pranjalithakur
Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to... High Unreviewed
CVE-2026-18017 was published Jul 30, 2026
Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to... High Unreviewed
CVE-2026-18012 was published Jul 30, 2026
Use after free in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote... High Unreviewed
CVE-2026-17967 was published Jul 30, 2026
Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to... Critical Unreviewed
CVE-2026-17947 was published Jul 30, 2026
Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had... Critical Unreviewed
CVE-2026-17924 was published Jul 30, 2026
Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local... Moderate Unreviewed
CVE-2026-17932 was published Jul 30, 2026
Use after free in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to... High Unreviewed
CVE-2026-17886 was published Jul 30, 2026
Integer overflow in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to... High Unreviewed
CVE-2026-17881 was published Jul 30, 2026
Use after free in TabStrip in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who... High Unreviewed
CVE-2026-17887 was published Jul 30, 2026
Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote... Moderate Unreviewed
CVE-2026-17891 was published Jul 30, 2026
Use after free in Views in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote... High Unreviewed
CVE-2026-17894 was published Jul 30, 2026
Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to... High Unreviewed
CVE-2026-17896 was published Jul 30, 2026
Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who... High Unreviewed
CVE-2026-17898 was published Jul 30, 2026
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a... High Unreviewed
CVE-2026-17920 was published Jul 30, 2026
Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to... High Unreviewed
CVE-2026-17918 was published Jul 30, 2026
Object lifecycle issue in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote... High Unreviewed
CVE-2026-17884 was published Jul 30, 2026
Use after free in Tracing in Google Chrome on Windows prior to 151.0.7922.72 allowed a local... High Unreviewed
CVE-2026-17862 was published Jul 30, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database