Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,680
Maven
5,000+
npm
4,308
NuGet
760
pip
4,080
Pub
12
RubyGems
958
Rust
1,061
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

572 advisories

Loading
Tinyproxy through 1.11.2 contains an integer overflow vulnerability in the strip_return_port()... Moderate Unreviewed
CVE-2025-63938 was published Nov 26, 2025
Integer wraparound in multiple PostgreSQL libpq client library functions allows an application... Moderate Unreviewed
CVE-2025-12818 was published Nov 13, 2025
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwc-qos:... Moderate Unreviewed
CVE-2022-49642 was published Oct 23, 2025
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate BOOT... Moderate Unreviewed
CVE-2022-49553 was published Oct 22, 2025
In gnss driver, there is a possible out of bounds read due to an integer overflow. This could... Moderate Unreviewed
CVE-2025-20722 was published Oct 14, 2025
pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-... Moderate Unreviewed
CVE-2025-55554 was published Sep 25, 2025
pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and... Moderate Unreviewed
CVE-2025-55552 was published Sep 25, 2025
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve... Moderate Unreviewed
CVE-2022-49075 was published Sep 23, 2025
In the Linux kernel, the following vulnerability has been resolved: af_netlink: Fix shift out of... Moderate Unreviewed
CVE-2022-49197 was published Sep 23, 2025
In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer... Moderate Unreviewed
CVE-2025-59800 was published Sep 22, 2025
In the Linux kernel, the following vulnerability has been resolved: dmaengine: zynqmp_dma: In... Moderate Unreviewed
CVE-2022-49320 was published Sep 22, 2025
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: anx7625: Fix... Moderate Unreviewed
CVE-2022-49222 was published Sep 22, 2025
Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may... Moderate Unreviewed
CVE-2021-26377 was published Sep 6, 2025
In lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer... Moderate Unreviewed
CVE-2025-36900 was published Sep 4, 2025
An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below,... Moderate Unreviewed
CVE-2025-25248 was published Aug 12, 2025
Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an... Moderate Unreviewed
CVE-2025-50166 was published Aug 12, 2025
EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by... Moderate Unreviewed
CVE-2024-38805 was published Aug 12, 2025
Vulnerability of insufficient data length verification in the partition module. Impact:... Moderate Unreviewed
CVE-2025-54631 was published Aug 6, 2025
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through... Moderate Unreviewed
CVE-2025-7458 was published Jul 29, 2025
A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an... Moderate Unreviewed
CVE-2025-5449 was published Jul 25, 2025
CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chm_lib.c... Moderate Unreviewed
CVE-2025-48172 was published Jul 4, 2025
Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent... Moderate Unreviewed
CVE-2025-50404 was published Jul 1, 2025
A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results... Moderate Unreviewed
CVE-2023-28908 was published Jun 28, 2025
In the Linux kernel, the following vulnerability has been resolved: bpf: fix potential 32-bit... Moderate Unreviewed
CVE-2022-50167 was published Jun 18, 2025
A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file... Moderate Unreviewed
CVE-2025-6196 was published Jun 17, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database