Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,509
Maven
5,000+
npm
5,000+
NuGet
1,093
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

6 advisories

Loading
EOSIO/eos eos version after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 contains a stack... Critical Unreviewed
CVE-2018-1000618 was published May 13, 2022
LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such... Critical Unreviewed
CVE-2023-51803 was published Apr 1, 2024
When the module renders a Svg file that contains a <pattern> element, it might end up rendering... Critical Unreviewed
CVE-2025-10728 was published Oct 3, 2025
ChilliCream GraphQL Platform: Utf8GraphQLParser Stack Overflow via Deeply Nested GraphQL Documents Critical
CVE-2026-40324 was published for HotChocolate.Language (NuGet) Apr 16, 2026
BZHunt Credited to BZHunt
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix signededness bug... Critical Unreviewed
CVE-2026-43185 was published May 6, 2026
A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library... Critical Unreviewed
CVE-2026-32327 was published Aug 6, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database