Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

42 advisories

Loading
Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped) Critical
CVE-2026-54754 was published for github.com/klever-io/klever-go (Go) Aug 28, 2026
fbsobreira Credited to fbsobreira
OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption... Critical Unreviewed
CVE-2026-51540 was published Jul 14, 2026
In the Linux kernel, the following vulnerability has been resolved: IB/isert: Reject login PDUs... Critical Unreviewed
CVE-2026-53176 was published Jun 25, 2026
Integer underflow vulnerability in Open-SAE-J1939 thru commit... Critical Unreviewed
CVE-2026-37534 was published May 1, 2026
MsQuic has a Remote Elevation of Privilege Vulnerability Critical
CVE-2026-32179 was published for Microsoft.Native.Quic.MsQuic.OpenSSL (NuGet) Apr 16, 2026
The Honeywell Experion PKS and OneWireless WDM contains an Integer Underflow vulnerability... Critical Unreviewed
CVE-2025-2523 was published Jul 10, 2025
In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI... Critical Unreviewed
CVE-2024-57823 was published Jan 10, 2025
Windows TCP/IP Remote Code Execution Vulnerability Critical Unreviewed
CVE-2024-38063 was published Aug 13, 2024
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability Critical Unreviewed
CVE-2024-38074 was published Jul 9, 2024
An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig... Critical Unreviewed
CVE-2024-23313 was published Feb 20, 2024
Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to... Critical Unreviewed
CVE-2024-0808 was published Jan 24, 2024
An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch. Critical Unreviewed
CVE-2022-4338 was published Jan 11, 2023
ZAngband zangband-data 2.7.5 is affected by an integer underflow vulnerability in src/tk/plat.c... Critical Unreviewed
CVE-2021-40589 was published Jun 9, 2022
A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of... Critical Unreviewed
CVE-2021-21811 was published May 24, 2022
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC)... Critical Unreviewed
CVE-2021-31889 was published May 24, 2022
Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in... Critical Unreviewed
CVE-2021-1919 was published May 24, 2022
Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto,... Critical Unreviewed
CVE-2021-1920 was published May 24, 2022
Loading a bgzip block can write out of bounds if size overflows. Critical
CVE-2021-28027 was published for bam (Rust) May 24, 2022
Possible out of bound memory access in audio due to integer underflow while processing modified... Critical Unreviewed
CVE-2020-3691 was published May 24, 2022
An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an off-by-one overwrite due to an... Critical Unreviewed
CVE-2019-14532 was published May 24, 2022
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing... Critical Unreviewed
CVE-2019-14199 was published May 24, 2022
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing... Critical Unreviewed
CVE-2019-14192 was published May 24, 2022
Possible integer underflow can happen when calculating length of elementary stream info from... Critical Unreviewed
CVE-2019-2244 was published May 24, 2022
Possible integer underflow can happen when calculating length of elementary stream map from... Critical Unreviewed
CVE-2019-2245 was published May 24, 2022
Improper input validation on input data which is used to locate and copy the additional IEs in... Critical Unreviewed
CVE-2018-11930 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database