Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
49
GitHub Actions
50
Go
3,623
Maven
5,000+
npm
5,000+
NuGet
927
pip
4,843
Pub
13
RubyGems
1,045
Rust
1,271
Swift
53
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

155 advisories

Loading
Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of... High Unreviewed
CVE-2026-6914 was published Apr 29, 2026
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: fix refcount... High Unreviewed
CVE-2026-31656 was published Apr 24, 2026
In the Linux kernel, the following vulnerability has been resolved: tipc: fix bc_ackers... High Unreviewed
CVE-2026-31662 was published Apr 24, 2026
A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the... High Unreviewed
CVE-2026-33999 was published Apr 23, 2026
Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or... High Unreviewed
CVE-2026-27296 was published Apr 15, 2026
Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or... High Unreviewed
CVE-2026-27297 was published Apr 15, 2026
Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized... High Unreviewed
CVE-2026-27907 was published Apr 14, 2026
strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP... High Unreviewed
CVE-2026-25075 was published Mar 23, 2026
GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2026-3084 was published Mar 16, 2026
libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value... High Unreviewed
CVE-2026-32775 was published Mar 16, 2026
Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to... High Unreviewed
CVE-2026-3538 was published Mar 4, 2026
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database... High Unreviewed
CVE-2026-3172 was published Feb 25, 2026
In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2... High Unreviewed
CVE-2025-62291 was published Jan 16, 2026
An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of... High Unreviewed
CVE-2025-67269 was published Jan 2, 2026
Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string(... High Unreviewed
CVE-2025-64076 was published Nov 18, 2025
Substance3D - Stager versions 3.1.5 and earlier are affected by an Integer Underflow (Wrap or... High Unreviewed
CVE-2025-61835 was published Nov 11, 2025
Illustrator on iPad versions 3.0.9 and earlier are affected by an Integer Underflow (Wrap or... High Unreviewed
CVE-2025-61836 was published Nov 11, 2025
Illustrator on iPad versions 3.0.9 and earlier are affected by an Integer Underflow (Wrap or... High Unreviewed
CVE-2025-61826 was published Nov 11, 2025
An integer overflow vulnerability exists in the QuickJS regular expression engine (libregexp) due... High Unreviewed
CVE-2025-62495 was published Oct 16, 2025
In the Linux kernel, the following vulnerability has been resolved: remoteproc: Fix count check... High Unreviewed
CVE-2022-49278 was published Sep 22, 2025
The Honeywell Experion PKS contains an Integer Underflow vulnerability in the component... High Unreviewed
CVE-2025-3947 was published Jul 10, 2025
Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an Integer Underflow (Wrap... High Unreviewed
CVE-2025-47130 was published Jul 9, 2025
InCopy versions 20.3, 19.5.3 and earlier are affected by an Integer Underflow (Wrap or Wraparound... High Unreviewed
CVE-2025-47097 was published Jul 9, 2025
Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an Integer Underflow (Wrap... High Unreviewed
CVE-2025-47128 was published Jul 9, 2025
InDesign Desktop versions 19.5.3 and earlier are affected by an Integer Underflow (Wrap or... High Unreviewed
CVE-2025-47136 was published Jul 9, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database