Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

72 advisories

Loading
A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip) before 1.4... High Unreviewed
CVE-2025-56364 was published Jul 15, 2026
Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to... High Unreviewed
CVE-2026-15132 was published Jul 9, 2026
Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who... High Unreviewed
CVE-2026-14413 was published Jul 2, 2026
Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to... High Unreviewed
CVE-2026-13825 was published Jul 1, 2026
An authenticated user with the read role may read limited amounts of uninitialized stack memory... High Unreviewed
CVE-2026-9754 was published Jun 10, 2026
Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to... High Unreviewed
CVE-2026-10976 was published Jun 5, 2026
Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to... High Unreviewed
CVE-2026-10973 was published Jun 5, 2026
Uninitialized Use in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who... High Unreviewed
CVE-2026-10960 was published Jun 5, 2026
Uninitialized Use in Gamepad in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote... High Unreviewed
CVE-2026-9972 was published May 29, 2026
Uninitialized Use in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote... High Unreviewed
CVE-2026-9963 was published May 29, 2026
Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in... High Unreviewed
CVE-2026-6751 was published Apr 21, 2026
Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 allowed a... High Unreviewed
CVE-2026-6311 was published Apr 15, 2026
An authenticated user with the read role may read limited amounts of uninitialized stack memory... High Unreviewed
CVE-2026-4147 was published Mar 17, 2026
A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus... High Unreviewed
CVE-2026-20051 was published Feb 25, 2026
A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in... High Unreviewed
CVE-2026-1333 was published Feb 16, 2026
Memory corruption while processing identity credential operations in the trusted application. High Unreviewed
CVE-2025-47348 was published Jan 7, 2026
A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK static... High Unreviewed
CVE-2025-10021 was published Dec 22, 2025
In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible memory corruption due to... High Unreviewed
CVE-2025-36935 was published Dec 11, 2025
In display, there is a possible memory corruption due to improper input validation. This could... High Unreviewed
CVE-2025-20766 was published Dec 2, 2025
When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic... High Unreviewed
CVE-2025-58071 was published Oct 15, 2025
Ashlar-Vellum Graphite VC6 File Parsing Uninitialized Variable Remote Code Execution... High Unreviewed
CVE-2025-7981 was published Sep 17, 2025
Ashlar-Vellum Graphite VC6 File Parsing Uninitialized Variable Remote Code Execution... High Unreviewed
CVE-2025-7978 was published Sep 17, 2025
Ashlar-Vellum Cobalt AR File Parsing Uninitialized Variable Remote Code Execution Vulnerability.... High Unreviewed
CVE-2025-7984 was published Sep 17, 2025
A Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in... High Unreviewed
CVE-2025-9450 was published Sep 17, 2025
In dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp, there is a possible way to cause a... High Unreviewed
CVE-2025-0081 was published Aug 27, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database