Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,873
Erlang
37
GitHub Actions
36
Go
2,520
Maven
5,000+
npm
4,160
NuGet
741
pip
3,959
Pub
12
RubyGems
946
Rust
1,027
Swift
39
Unreviewed advisories
All unreviewed
5,000+

11,130 advisories

Loading
In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS... High Unreviewed
CVE-2022-49292 was published Sep 22, 2025
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker... High Unreviewed
CVE-2025-23328 was published Sep 18, 2025
Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.... High Unreviewed
CVE-2025-7996 was published Sep 17, 2025
Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.... High Unreviewed
CVE-2025-7998 was published Sep 17, 2025
Ashlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.... High Unreviewed
CVE-2025-7990 was published Sep 17, 2025
Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.... High Unreviewed
CVE-2025-7980 was published Sep 17, 2025
Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.... High Unreviewed
CVE-2025-7987 was published Sep 17, 2025
Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.... High Unreviewed
CVE-2025-7988 was published Sep 17, 2025
Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.... High Unreviewed
CVE-2025-7986 was published Sep 17, 2025
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated... Critical Unreviewed
CVE-2025-9242 was published Sep 17, 2025
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out... High Unreviewed
CVE-2025-8893 was published Sep 16, 2025
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in... Low Unreviewed
CVE-2025-43349 was published Sep 16, 2025
The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7,... Moderate Unreviewed
CVE-2025-43353 was published Sep 16, 2025
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in... Moderate Unreviewed
CVE-2025-43302 was published Sep 16, 2025
serde_yml crate is unsound and unmaintained Moderate
GHSA-hhw4-xg65-fp2x was published for serde_yml (Rust) Sep 15, 2025
Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote... High Unreviewed
CVE-2025-21042 was published Sep 12, 2025
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote... High Unreviewed
CVE-2025-21043 was published Sep 12, 2025
Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to... High Unreviewed
CVE-2025-21034 was published Sep 11, 2025
Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write... High Unreviewed
CVE-2025-54245 was published Sep 9, 2025
Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write... High Unreviewed
CVE-2025-54243 was published Sep 9, 2025
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a... Moderate Unreviewed
CVE-2025-0034 was published Sep 6, 2025
An out of bounds write in the Linux graphics driver could allow an attacker to overflow the... Moderate Unreviewed
CVE-2025-0010 was published Sep 6, 2025
Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker... High Unreviewed
CVE-2021-26383 was published Sep 6, 2025
ImageMagick BlobStream Forward-Seek Under-Allocation Low
CVE-2025-57807 was published for Magick.NET-Q16-HDRI-OpenMP-arm64 (NuGet) Sep 5, 2025
mescuwa
In gralloc4, there is a possible out of bounds write due to a missing bounds check. This could... Moderate Unreviewed
CVE-2025-32316 was published Sep 5, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database