Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,680
Maven
5,000+
npm
4,308
NuGet
760
pip
4,081
Pub
12
RubyGems
958
Rust
1,061
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

572 advisories

Loading
Tinyproxy through 1.11.2 contains an integer overflow vulnerability in the strip_return_port()... Moderate Unreviewed
CVE-2025-63938 was published Nov 26, 2025
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on... Moderate Unreviewed
CVE-2018-12371 was published May 24, 2022
In the Linux kernel, the following vulnerability has been resolved: bpf: fix potential 32-bit... Moderate Unreviewed
CVE-2022-50167 was published Jun 18, 2025
In the Linux kernel, the following vulnerability has been resolved: crypto: ecdsa - Harden... Moderate Unreviewed
CVE-2025-37984 was published May 20, 2025
Integer wraparound in multiple PostgreSQL libpq client library functions allows an application... Moderate Unreviewed
CVE-2025-12818 was published Nov 13, 2025
In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix array overflow... Moderate Unreviewed
CVE-2025-37857 was published May 9, 2025
In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Prevent integer... Moderate Unreviewed
CVE-2025-37858 was published May 9, 2025
In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or... Moderate Unreviewed
CVE-2023-52339 was published Jan 12, 2024
copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate... Moderate Unreviewed
CVE-2024-23851 was published Jan 23, 2024
An integer overflow was addressed through improved input validation. This issue is fixed in... Moderate Unreviewed
CVE-2024-44198 was published Sep 17, 2024
An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an... Moderate Unreviewed
CVE-2024-34403 was published May 3, 2024
In the Linux kernel, the following vulnerability has been resolved: padata: use integer wrap... Moderate Unreviewed
CVE-2024-47739 was published Oct 21, 2024
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix overflow in... Moderate Unreviewed
CVE-2024-43890 was published Aug 26, 2024
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure... Moderate Unreviewed
CVE-2024-46726 was published Sep 18, 2024
Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to... Moderate Unreviewed
CVE-2024-21844 was published Aug 14, 2024
In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends:... Moderate Unreviewed
CVE-2024-42223 was published Jul 30, 2024
In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty... Moderate Unreviewed
CVE-2024-42131 was published Jul 30, 2024
A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not... Moderate Unreviewed
CVE-2025-49180 was published Jun 17, 2025
In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications... Moderate Unreviewed
CVE-2025-48175 was published May 16, 2025
In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer... Moderate Unreviewed
CVE-2025-48174 was published May 16, 2025
A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an... Moderate Unreviewed
CVE-2025-32364 was published Apr 7, 2025
A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does... Moderate Unreviewed
CVE-2025-49179 was published Jun 17, 2025
A flaw was found in the Big Requests extension. The request length is multiplied by 4 before... Moderate Unreviewed
CVE-2025-49176 was published Jun 17, 2025
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix possible int... Moderate Unreviewed
CVE-2025-21736 was published Feb 27, 2025
In the Linux kernel, the following vulnerability has been resolved: net: fix geneve_opt length... Moderate Unreviewed
CVE-2025-22055 was published Apr 16, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database