Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

2,447 advisories

Loading
vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts Moderate
CVE-2026-73557 was published for vllm (pip) Sep 4, 2026
hexcraft-labs Credited to hexcraft-labs and jperezdealgaba jperezdealgaba jperezdealgaba
A security flaw has been discovered in ramon-victor freegpt-webui up to... Low Unreviewed
CVE-2026-85704 was published Sep 4, 2026
A security vulnerability has been detected in jofpin trape 2.0. This vulnerability affects... Low Unreviewed
CVE-2026-85639 was published Sep 4, 2026
A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the... Moderate Unreviewed
CVE-2026-82543 was published Aug 30, 2026
A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an... Low Unreviewed
CVE-2026-82364 was published Aug 29, 2026
free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI High
CVE-2026-55784 was published for github.com/free5gc/ausf (Go) Aug 28, 2026
jaimealruiz Credited to jaimealruiz and jav1er8 jav1er8 jav1er8
Concurrent execution using shared resource with improper synchronization ('race condition') in... Moderate Unreviewed
CVE-2026-58616 was published Aug 28, 2026
SvelteKit versions from 2.38.0 before 2.60.1 contain a race condition in query.batch that allows... Moderate Unreviewed
CVE-2026-82258 was published Aug 28, 2026
When an IntegrationFlow uses .fluxTransform() with an asynchronous/reordering fluxFunction that... High Unreviewed
CVE-2026-59324 was published Aug 27, 2026
A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR... Moderate Unreviewed
CVE-2026-59321 was published Aug 27, 2026
A null pointer dereference vulnerability exists in the server-side session management logic of... High Unreviewed
CVE-2026-26456 was published Aug 27, 2026
Race condition in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a... Moderate Unreviewed
CVE-2026-79117 was published Aug 25, 2026
Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to... Moderate Unreviewed
CVE-2026-79094 was published Aug 25, 2026
Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who... Moderate Unreviewed
CVE-2026-79014 was published Aug 25, 2026
Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote... Moderate Unreviewed
CVE-2026-78979 was published Aug 25, 2026
Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute... High Unreviewed
CVE-2026-78901 was published Aug 25, 2026
Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to... High Unreviewed
CVE-2026-78906 was published Aug 25, 2026
Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an... High Unreviewed
CVE-2026-78915 was published Aug 25, 2026
Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker... High Unreviewed
CVE-2026-78934 was published Aug 25, 2026
Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a... High Unreviewed
CVE-2026-77638 was published Aug 20, 2026
Zoo Design Studio: Memory-corruption in memory handling of lib-kcl Moderate
GHSA-mc9m-6fm9-pghc was published for kcl-lib (pip) Aug 20, 2026
maxammann Credited to maxammann
OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access Moderate
CVE-2026-45404 was published for go.opentelemetry.io/otel/bridge/opentracing (Go) Aug 20, 2026
pellared Credited to pellared and MrAlias MrAlias MrAlias
HCL IntelliOps Event Management (IEM) is affected by a race condition. A "timing window" can... Moderate Unreviewed
CVE-2025-62300 was published Aug 20, 2026
In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model... Moderate Unreviewed
CVE-2026-76393 was published Aug 20, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in... High Unreviewed
CVE-2026-62727 was published Aug 19, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database