Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,963
Erlang
39
GitHub Actions
38
Go
2,615
Maven
5,000+
npm
4,255
NuGet
760
pip
4,036
Pub
12
RubyGems
953
Rust
1,049
Swift
45
Unreviewed advisories
All unreviewed
5,000+

600 advisories

Loading
ImageMagick has Integer Overflow in BMP Decoder (ReadBMP) Moderate
CVE-2025-62171 was published for Magick.NET-Q16-AnyCPU (NuGet) Oct 28, 2025
wooseokdotkim
Credited to wooseokdotkim
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwc-qos:... Moderate Unreviewed
CVE-2022-49642 was published Oct 23, 2025
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate BOOT... Moderate Unreviewed
CVE-2022-49553 was published Oct 22, 2025
In gnss driver, there is a possible out of bounds read due to an integer overflow. This could... Moderate Unreviewed
CVE-2025-20722 was published Oct 14, 2025
pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and... Moderate Unreviewed
CVE-2025-55552 was published Sep 25, 2025
pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-... Moderate Unreviewed
CVE-2025-55554 was published Sep 25, 2025
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve... Moderate Unreviewed
CVE-2022-49075 was published Sep 23, 2025
In the Linux kernel, the following vulnerability has been resolved: af_netlink: Fix shift out of... Moderate Unreviewed
CVE-2022-49197 was published Sep 23, 2025
In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer... Moderate Unreviewed
CVE-2025-59800 was published Sep 22, 2025
In the Linux kernel, the following vulnerability has been resolved: dmaengine: zynqmp_dma: In... Moderate Unreviewed
CVE-2022-49320 was published Sep 22, 2025
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: anx7625: Fix... Moderate Unreviewed
CVE-2022-49222 was published Sep 22, 2025
Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may... Moderate Unreviewed
CVE-2021-26377 was published Sep 6, 2025
In lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer... Moderate Unreviewed
CVE-2025-36900 was published Sep 4, 2025
An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below,... Moderate Unreviewed
CVE-2025-25248 was published Aug 12, 2025
Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an... Moderate Unreviewed
CVE-2025-50166 was published Aug 12, 2025
EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by... Moderate Unreviewed
CVE-2024-38805 was published Aug 12, 2025
Vulnerability of insufficient data length verification in the partition module. Impact:... Moderate Unreviewed
CVE-2025-54631 was published Aug 6, 2025
russh is missing overflow checks during channel windows adjust Moderate
CVE-2025-54804 was published for russh (Rust) Aug 4, 2025
onjonjo
Credited to onjonjo
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through... Moderate Unreviewed
CVE-2025-7458 was published Jul 29, 2025
Duplicate Advisory: transpose: Buffer overflow due to integer overflow Moderate
GHSA-p444-p2rm-hvrw was published for transpose (Rust) Jul 27, 2025 • withdrawn
A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an... Moderate Unreviewed
CVE-2025-5449 was published Jul 25, 2025
Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits Moderate
CVE-2025-52520 was published for org.apache.tomcat:tomcat-catalina (Maven) Jul 10, 2025
CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chm_lib.c... Moderate Unreviewed
CVE-2025-48172 was published Jul 4, 2025
Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent... Moderate Unreviewed
CVE-2025-50404 was published Jul 1, 2025
A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results... Moderate Unreviewed
CVE-2023-28908 was published Jun 28, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database