Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,856
Erlang
36
GitHub Actions
36
Go
2,488
Maven
5,000+
npm
4,104
NuGet
735
pip
3,923
Pub
12
RubyGems
945
Rust
1,017
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

927 advisories

Loading
Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized... High Unreviewed
CVE-2025-53149 was published Aug 12, 2025
In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer... High Unreviewed
CVE-2025-32325 was published Sep 4, 2025
In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer... High Unreviewed
CVE-2024-49714 was published Sep 4, 2025
In ConvertReductionOp of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds write... High Unreviewed
CVE-2025-36906 was published Sep 4, 2025
In Skia, there is a possible out of bounds write due to a heap buffer overflow. This could lead... High Unreviewed
CVE-2025-32318 was published Sep 5, 2025
In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap... High Unreviewed
CVE-2025-26455 was published Sep 5, 2025
In draw_surface_image() of abl/android/lib/draw/draw.c, there is a possible out of bounds write... High Unreviewed
CVE-2025-36907 was published Sep 4, 2025
Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation... High Unreviewed
CVE-2025-8302 was published Sep 2, 2025
Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation... High Unreviewed
CVE-2025-8300 was published Sep 2, 2025
Realtek RTL8811AU rtwlanu.sys N6CSet_DOT11_CIPHER_DEFAULT_KEY Heap-based Buffer Overflow Local... High Unreviewed
CVE-2025-8301 was published Sep 2, 2025
Realtek rtl81xx SDK Wi-Fi Driver MgntActSet_TEREDO_SET_RS_PACKET Heap-based Buffer Overflow Local... High Unreviewed
CVE-2025-8299 was published Sep 2, 2025
A heap-based buffer overflow vulnerability in NetSupport Manager 14.x versions prior to 14.12... High Unreviewed
CVE-2025-34164 was published Aug 30, 2025
NanoMQ 0.17.5 is vulnerable to heap-buffer-overflow in the conn_handler function of mqtt_parser.c... High Unreviewed
CVE-2023-34488 was published Jun 12, 2023
A maliciously crafted SKP file, when linked or imported into Autodesk Revit, can be used to cause... High Unreviewed
CVE-2024-11608 was published Dec 9, 2024
A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL... High Unreviewed
CVE-2025-50129 was published Aug 26, 2025
A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL... High Unreviewed
CVE-2025-35984 was published Aug 26, 2025
A memory corruption vulnerability exists in the PSD RLE Decoding functionality of the SAIL Image... High Unreviewed
CVE-2025-53085 was published Aug 26, 2025
IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17... High Unreviewed
CVE-2025-2900 was published May 14, 2025
A maliciously crafted 3DM file, when linked or imported into certain Autodesk products, can force... High Unreviewed
CVE-2025-5043 was published Jul 29, 2025
A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based... High Unreviewed
CVE-2025-1651 was published Mar 13, 2025
A maliciously crafted RTE file, when parsed through Autodesk Revit, can force a Heap-Based... High Unreviewed
CVE-2025-5040 was published Jul 10, 2025
A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can... High Unreviewed
CVE-2025-1275 was published Apr 15, 2025
A maliciously crafted DWG file, when parsed through Autodesk Revit, can cause a Stack-Based... High Unreviewed
CVE-2025-2497 was published Apr 15, 2025
A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a... High Unreviewed
CVE-2025-1656 was published Apr 15, 2025
A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a... High Unreviewed
CVE-2025-1273 was published Apr 15, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database