Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,680
Maven
5,000+
npm
4,308
NuGet
760
pip
4,081
Pub
12
RubyGems
958
Rust
1,061
Swift
45
Unreviewed advisories
All unreviewed
5,000+

608 advisories

Loading
node-forge is vulnerable to ASN.1 OID Integer Truncation Moderate
CVE-2025-66030 was published for node-forge (npm) Nov 26, 2025
wodzen
Credited to wodzen
Tinyproxy through 1.11.2 contains an integer overflow vulnerability in the strip_return_port()... Moderate Unreviewed
CVE-2025-63938 was published Nov 26, 2025
Integer wraparound in multiple PostgreSQL libpq client library functions allows an application... Moderate Unreviewed
CVE-2025-12818 was published Nov 13, 2025
ImageMagick has Integer Overflow in BMP Decoder (ReadBMP) Moderate
CVE-2025-62171 was published for Magick.NET-Q16-AnyCPU (NuGet) Oct 28, 2025
wooseokdotkim
Credited to wooseokdotkim
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwc-qos:... Moderate Unreviewed
CVE-2022-49642 was published Oct 23, 2025
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate BOOT... Moderate Unreviewed
CVE-2022-49553 was published Oct 22, 2025
In gnss driver, there is a possible out of bounds read due to an integer overflow. This could... Moderate Unreviewed
CVE-2025-20722 was published Oct 14, 2025
pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-... Moderate Unreviewed
CVE-2025-55554 was published Sep 25, 2025
pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and... Moderate Unreviewed
CVE-2025-55552 was published Sep 25, 2025
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve... Moderate Unreviewed
CVE-2022-49075 was published Sep 23, 2025
In the Linux kernel, the following vulnerability has been resolved: af_netlink: Fix shift out of... Moderate Unreviewed
CVE-2022-49197 was published Sep 23, 2025
In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer... Moderate Unreviewed
CVE-2025-59800 was published Sep 22, 2025
In the Linux kernel, the following vulnerability has been resolved: dmaengine: zynqmp_dma: In... Moderate Unreviewed
CVE-2022-49320 was published Sep 22, 2025
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: anx7625: Fix... Moderate Unreviewed
CVE-2022-49222 was published Sep 22, 2025
Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may... Moderate Unreviewed
CVE-2021-26377 was published Sep 6, 2025
In lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer... Moderate Unreviewed
CVE-2025-36900 was published Sep 4, 2025
An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below,... Moderate Unreviewed
CVE-2025-25248 was published Aug 12, 2025
Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an... Moderate Unreviewed
CVE-2025-50166 was published Aug 12, 2025
EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by... Moderate Unreviewed
CVE-2024-38805 was published Aug 12, 2025
Vulnerability of insufficient data length verification in the partition module. Impact:... Moderate Unreviewed
CVE-2025-54631 was published Aug 6, 2025
russh is missing overflow checks during channel windows adjust Moderate
CVE-2025-54804 was published for russh (Rust) Aug 4, 2025
onjonjo
Credited to onjonjo
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through... Moderate Unreviewed
CVE-2025-7458 was published Jul 29, 2025
Duplicate Advisory: transpose: Buffer overflow due to integer overflow Moderate
GHSA-p444-p2rm-hvrw was published for transpose (Rust) Jul 27, 2025 • withdrawn
A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an... Moderate Unreviewed
CVE-2025-5449 was published Jul 25, 2025
Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits Moderate
CVE-2025-52520 was published for org.apache.tomcat:tomcat-catalina (Maven) Jul 10, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database