Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,185
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

17,783 advisories

Loading
A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server. Low Unreviewed
CVE-2026-79835 was published Oct 15, 2026
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote... Low Unreviewed
CVE-2025-29896 was published Oct 15, 2026
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote... Low Unreviewed
CVE-2025-29895 was published Oct 15, 2026
A buffer copy without checking size of input vulnerability has been reported to affect Qsync... Low Unreviewed
CVE-2025-29897 was published Oct 15, 2026
A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function... Low Unreviewed
CVE-2026-110810 was published Oct 15, 2026
A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this... Low Unreviewed
CVE-2026-110809 was published Oct 15, 2026
A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability... Low Unreviewed
CVE-2026-110807 was published Oct 15, 2026
A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function... Low Unreviewed
CVE-2026-110698 was published Oct 15, 2026
A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile... Low Unreviewed
CVE-2026-110695 was published Oct 15, 2026
A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the... Low Unreviewed
CVE-2026-110694 was published Oct 14, 2026
A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function... Low Unreviewed
CVE-2026-110689 was published Oct 14, 2026
A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud... Low Unreviewed
CVE-2026-0311 was published Oct 14, 2026
A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables... Low Unreviewed
CVE-2026-0316 was published Oct 14, 2026
A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated... Low Unreviewed
CVE-2026-0317 was published Oct 14, 2026
Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive... Low Unreviewed
CVE-2026-82153 was published Oct 14, 2026
BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extraction Low
CVE-2026-14966 was published for bbot (pip) Oct 14, 2026
tonghuaroot Credited to tonghuaroot
Apprise forwards configured auth headers across cross-origin HTTP redirects Low
CVE-2026-59180 was published for apprise (pip) Oct 14, 2026
gistrec Credited to gistrec
An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows... Low Unreviewed
CVE-2026-93637 was published Oct 14, 2026
Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image... Low Unreviewed
CVE-2026-110734 was published Oct 14, 2026
Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core... Low Unreviewed
CVE-2026-110736 was published Oct 14, 2026
Godot Engine through 4.7.2 has a heap out-of-bounds write exists in the binary resource loader ... Low Unreviewed
CVE-2026-110735 was published Oct 14, 2026
miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml... Low Unreviewed
CVE-2026-110656 was published Oct 14, 2026
miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml... Low Unreviewed
CVE-2026-110655 was published Oct 14, 2026
ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in... Low Unreviewed
CVE-2026-110627 was published Oct 14, 2026
Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows... Low Unreviewed
CVE-2026-110624 was published Oct 14, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database