Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

12 advisories

Loading
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be... Low Unreviewed
CVE-2026-73283 was published Aug 11, 2026
A logic vulnerability was found in GStreamer's webrtcbin component. The _check_sdp_crypto()... Low Unreviewed
CVE-2026-14935 was published Jul 7, 2026
cut: -s (only-delimited) ignored when delimiter is a newline Low
CVE-2026-35343 was published for uu_cut (Rust) Jul 6, 2026
In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal. Low Unreviewed
CVE-2026-44928 was published May 8, 2026
ydb-go-sdk's transactions are not committed using the `options.WithCommit()` option on last call `table.Transaction.Execute` in transaction Low
GHSA-28xx-pppm-vqff was published for github.com/ydb-platform/ydb-go-sdk/v3 (Go) Apr 30, 2026
kprokopenko Credited to kprokopenko and asmyasnikov asmyasnikov asmyasnikov
Duplicate Advisory: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided Low
GHSA-qmq6-f8pr-cx5x was published for uuid (npm) Apr 23, 2026 • withdrawn
julianladisch Credited to julianladisch
Duplicate Advisory: uutils coreutils has an Issue With its Always-Incorrect Control Flow Implementation Low
GHSA-hj9r-8pfm-rmjj was published for coreutils (Rust) Apr 22, 2026 • withdrawn
OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in... Low Unreviewed
CVE-2026-35387 was published Apr 2, 2026
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause... Low Unreviewed
CVE-2025-33199 was published Nov 25, 2025
Vyper Does Not Check the Success of Certain Precompile Calls Low
CVE-2025-21607 was published for vyper (pip) Jan 14, 2025
ritzdorf Credited to ritzdorf, vasinicola, and trocher vasinicola vasinicola
trocher trocher
In Gradio, the `enable_monitoring` flag set to `False` does not disable monitoring Low
CVE-2024-47168 was published for gradio (pip) Oct 10, 2024
ahpaleus Credited to ahpaleus and Vasco-jofra Vasco-jofra Vasco-jofra
Keycloak's improper input validation allows using email as username Low
CVE-2021-3754 was published for org.keycloak:keycloak-services (Maven) Jun 12, 2024
Chetven Credited to Chetven
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database