Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,538
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,516
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

26 advisories

Loading
FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP... Moderate Unreviewed
CVE-2026-75145 was published Aug 19, 2026
A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The ... Moderate Unreviewed
CVE-2026-19879 was published Aug 14, 2026
A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The... Moderate Unreviewed
CVE-2026-6426 was published Aug 11, 2026
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026... Moderate Unreviewed
CVE-2026-21069 was published Aug 10, 2026
ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow Moderate
CVE-2026-53466 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 31, 2026
Bin-infinite Credited to Bin-infinite
vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving Moderate
CVE-2026-53923 was published for vllm (pip) Jun 17, 2026
Aviral2642 Credited to Aviral2642, russellb, and jperezdealgaba russellb russellb
jperezdealgaba jperezdealgaba
Smart contract Marginal v1 performs unsafe downcast, allowing attackers to settle a large debt... Moderate Unreviewed
CVE-2026-4931 was published Apr 7, 2026
The Wallet for WooCommerce plugin for WordPress is vulnerable to incorrect conversion between... Moderate Unreviewed
CVE-2024-7747 was published Nov 28, 2024
A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions <... Moderate Unreviewed
CVE-2022-40225 was published Jun 11, 2024
vyper's range(start, start + N) reverts for negative numbers Moderate
CVE-2024-32481 was published for vyper (pip) Apr 25, 2024
trocher Credited to trocher
Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated... Moderate Unreviewed
CVE-2023-28063 was published Feb 6, 2024
Okio Signed to Unsigned Conversion Error vulnerability Moderate
CVE-2023-3635 was published for com.squareup.okio:okio (Maven) Jul 12, 2023
trettstadtnlb Credited to trettstadtnlb and adrienpessu adrienpessu adrienpessu
Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed... Moderate Unreviewed
CVE-2022-42324 was published Nov 1, 2022
A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is an... Moderate Unreviewed
CVE-2014-125012 was published Jun 19, 2022
An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux... Moderate Unreviewed
CVE-2020-28588 was published May 24, 2022
PowerDNS Authoritative daemon , all versions pdns 4.1.x before pdns 4.1.10, exiting when... Moderate Unreviewed
CVE-2019-10203 was published May 24, 2022
gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7... Moderate Unreviewed
CVE-2018-5711 was published May 13, 2022
In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative... Moderate Unreviewed
CVE-2018-5251 was published May 13, 2022
The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library (aka... Moderate Unreviewed
CVE-2017-17446 was published May 13, 2022
FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows... Moderate Unreviewed
CVE-2010-2807 was published May 13, 2022
Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context... Moderate Unreviewed
CVE-2007-4988 was published May 1, 2022
Overflow/crash in `tf.range` Moderate
CVE-2021-41202 was published for tensorflow (pip) Nov 10, 2021
Integer overflow due to conversion to unsigned Moderate
CVE-2021-37645 was published for tensorflow (pip) Aug 25, 2021
Bad alloc in `StringNGrams` caused by integer conversion Moderate
CVE-2021-37646 was published for tensorflow (pip) Aug 25, 2021
Crash caused by integer conversion to unsigned Moderate
CVE-2021-37661 was published for tensorflow (pip) Aug 25, 2021
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database