Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,737
Maven
5,000+
npm
4,337
NuGet
764
pip
4,112
Pub
12
RubyGems
960
Rust
1,068
Swift
45
Unreviewed advisories
All unreviewed
5,000+

7,054 advisories

Loading
Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and... High Unreviewed
CVE-2025-64899 was published Dec 9, 2025
DNG SDK versions 1.7.0 and earlier are affected by an Out-of-bounds Read vulnerability that could... High Unreviewed
CVE-2025-64893 was published Dec 9, 2025
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code... High Unreviewed
CVE-2025-62564 was published Dec 9, 2025
Out-of-bounds read in Application Information Services allows an authorized attacker to elevate... High Unreviewed
CVE-2025-62572 was published Dec 9, 2025
Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose... Moderate Unreviewed
CVE-2025-62468 was published Dec 9, 2025
Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to... High Unreviewed
CVE-2025-62457 was published Dec 9, 2025
Out-of-bounds read in Windows Projected File System allows an authorized attacker to elevate... High Unreviewed
CVE-2025-55233 was published Dec 9, 2025
In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer... Moderate Unreviewed
CVE-2025-48622 was published Dec 8, 2025
In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check... High Unreviewed
CVE-2025-48596 was published Dec 8, 2025
In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer... High Unreviewed
CVE-2025-48592 was published Dec 8, 2025
A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap... Moderate Unreviewed
CVE-2025-59391 was published Dec 8, 2025
In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton()... High Unreviewed
CVE-2025-38556 was published Aug 19, 2025
Out-of-bounds read vulnerability in bootloader prior to SMR Dec-2025 Release 1 allows physical... Moderate Unreviewed
CVE-2025-58476 was published Dec 2, 2025
Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote... Moderate Unreviewed
CVE-2025-58479 was published Dec 2, 2025
A flaw was found in the libssh library. An out-of-bounds read can be triggered in the sftp_handle... Moderate Unreviewed
CVE-2025-5318 was published Jun 26, 2025
A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing... Moderate Unreviewed
CVE-2025-14104 was published Dec 5, 2025
OpenZeppelin Contracts base64 encoding may read from potentially dirty memory Moderate
CVE-2024-27094 was published for @openzeppelin/contracts (npm) Feb 29, 2024
rholterhus
Credited to rholterhus
In the Linux kernel, the following vulnerability has been resolved: phy: hisilicon: Fix an out... High Unreviewed
CVE-2023-53238 was published Sep 15, 2025
file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a... Moderate Unreviewed
CVE-2012-1571 was published May 17, 2022
The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c... High Unreviewed
CVE-2017-12997 was published May 13, 2022
The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print... High Unreviewed
CVE-2017-12990 was published May 13, 2022
The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain... High Unreviewed
CVE-2017-12995 was published May 13, 2022
In the Linux kernel, the following vulnerability has been resolved: s390/cio: fix out-of-bounds... High Unreviewed
CVE-2022-50307 was published Sep 15, 2025
In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential out of... High Unreviewed
CVE-2022-50306 was published Sep 15, 2025
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of... High Unreviewed
CVE-2023-53213 was published Sep 15, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database