Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,185
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

127 advisories

Loading
An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks... High Unreviewed
CVE-2026-101963 was published Oct 14, 2026
A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the... Moderate Unreviewed
CVE-2026-109410 was published Oct 13, 2026
fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache) Moderate
CVE-2026-107721 was published for fast-jwt (npm) Oct 8, 2026
ridingsa Credited to ridingsa
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco... High Unreviewed
CVE-2026-76470 was published Oct 7, 2026
Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a... Moderate Unreviewed
CVE-2026-106420 was published Oct 6, 2026
Vyper: Call stack corruption when passing complex type containing non-base type members as argument Moderate
GHSA-4v7v-gqf9-ww2g was published for vyper (pip) Oct 6, 2026
Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks... Moderate Unreviewed
CVE-2026-97071 was published Oct 5, 2026
ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6()... Moderate Unreviewed
CVE-2026-88371 was published Sep 24, 2026
Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse... High Unreviewed
CVE-2026-18459 was published Sep 22, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure... High Unreviewed
CVE-2026-20335 was published Sep 16, 2026
snipe-it before 8.7.0 contains an incorrect calculation vulnerability in checkout request... Moderate Unreviewed
CVE-2026-86736 was published Sep 8, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR... High Unreviewed
CVE-2026-20275 was published Sep 2, 2026
Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped) Critical
CVE-2026-54754 was published for github.com/klever-io/klever-go (Go) Aug 28, 2026
fbsobreira Credited to fbsobreira
Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to... High Unreviewed
CVE-2026-76043 was published Aug 18, 2026
New API: Integer overflow in quota billing yields negative charges (self-crediting) Critical
CVE-2026-71479 was published for github.com/QuantumNous/new-api (Go) Aug 17, 2026
lihui12388 Credited to lihui12388 and Calcium-Ion Calcium-Ion Calcium-Ion
Incorrect calculation for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3:... Moderate Unreviewed
CVE-2026-20763 was published Aug 11, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE... High Unreviewed
CVE-2026-20270 was published Aug 5, 2026
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion Low
GHSA-464c-974j-9xm6 was published for @aws-cdk/aws-codebuild (Go) Jul 24, 2026
ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments Moderate
CVE-2026-55597 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in... Critical Unreviewed
CVE-2026-16363 was published Jul 21, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix... Moderate Unreviewed
CVE-2026-64006 was published Jul 19, 2026
The X25519 x86_64 assembly implementation fails to clear the most significant bit during the... Low Unreviewed
CVE-2026-10512 was published Jun 25, 2026
Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in... Low Unreviewed
CVE-2026-44074 was published May 21, 2026
An incorrect calculation in the hextoint macro in Netatalk 2.0.0 through 4.4.2 due to improper... Low Unreviewed
CVE-2026-7836 was published May 21, 2026
Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that... Moderate Unreviewed
CVE-2023-7346 was published May 20, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database