GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
40
Go
2,954
Maven
5,000+
npm
4,606
NuGet
787
pip
4,305
Pub
12
RubyGems
984
Rust
1,121
Swift
49
Unreviewed advisories
All unreviewed
5,000+
329 advisories
Filter by severity
In the Linux kernel, the following vulnerability has been resolved:
jfs: upper bound check of...
High
Unreviewed
CVE-2025-38697
was published
Sep 5, 2025
In the Linux kernel, the following vulnerability has been resolved:
fs: jfs: Fix UBSAN: array...
High
Unreviewed
CVE-2023-53485
was published
Oct 1, 2025
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: use...
High
Unreviewed
CVE-2025-39823
was published
Sep 16, 2025
Memory corruption when accessing resources in kernel driver.
High
Unreviewed
CVE-2025-47393
was published
Jan 7, 2026
FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability...
High
Unreviewed
CVE-2025-15271
was published
Dec 31, 2025
FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability...
High
Unreviewed
CVE-2025-15270
was published
Dec 31, 2025
The free5GC UPF suffers from a lack of bounds checking on the SEID when processing PFCP Session...
High
Unreviewed
CVE-2025-65562
was published
Dec 18, 2025
In the Linux kernel, the following vulnerability has been resolved:
fbcon: Make sure modelist...
High
Unreviewed
CVE-2025-38198
was published
Jul 4, 2025
In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: Fix the...
High
Unreviewed
CVE-2025-38146
was published
Jul 3, 2025
In the Linux kernel, the following vulnerability has been resolved:
scsi: megaraid_sas: Fix...
High
Unreviewed
CVE-2025-38239
was published
Jul 9, 2025
Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an...
High
Unreviewed
CVE-2024-0901
was published
Mar 26, 2024
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Add...
High
Unreviewed
CVE-2023-53395
was published
Sep 18, 2025
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Collect command...
High
Unreviewed
CVE-2023-53340
was published
Sep 17, 2025
In the Linux kernel, the following vulnerability has been resolved:
ata: ahci: Match...
High
Unreviewed
CVE-2022-50315
was published
Sep 15, 2025
In the Linux kernel, the following vulnerability has been resolved:
vxlan: Fix nexthop hash size...
High
Unreviewed
CVE-2023-53192
was published
Sep 15, 2025
A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver
version drv_gen5_106-01...
High
Unreviewed
CVE-2025-0657
was published
Nov 27, 2025
vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs
High
CVE-2025-62372
was published
for
vllm
(pip)
Nov 20, 2025
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Avoid...
High
Unreviewed
CVE-2025-38367
was published
Jul 25, 2025
In the Linux kernel, the following vulnerability has been resolved:
net: atlantic: fix aq_vec...
High
Unreviewed
CVE-2022-50066
was published
Jun 18, 2025
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: Set...
High
Unreviewed
CVE-2025-38013
was published
Jun 18, 2025
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution...
High
Unreviewed
CVE-2023-40477
was published
May 3, 2024
BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability....
High
Unreviewed
CVE-2023-27349
was published
May 3, 2024
In the Linux kernel, the following vulnerability has been resolved:
net_sched: sch_sfq: move the...
High
Unreviewed
CVE-2025-37752
was published
May 1, 2025
Memory corruption while processing audio streaming operations.
High
Unreviewed
CVE-2025-47352
was published
Nov 4, 2025
Memory corruption when triggering a subsystem crash with an out-of-range identifier.
High
Unreviewed
CVE-2025-47361
was published
Nov 4, 2025
ProTip!
Advisories are also available from the
GraphQL API