GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
                  
                    
                      
                      All reviewed
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      Composer
                    
                    
                      4,963
                    
                  
                  
                    
                      
                      Erlang
                    
                    
                      39
                    
                  
                  
                    
                      
                      GitHub Actions
                    
                    
                      38
                    
                  
                  
                    
                      
                      Go
                    
                    
                      2,615
                    
                  
                  
                    
                      
                      Maven
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      npm
                    
                    
                      4,255
                    
                  
                  
                    
                      
                      NuGet
                    
                    
                      760
                    
                  
                  
                    
                      
                      pip
                    
                    
                      4,034
                    
                  
                  
                    
                      
                      Pub
                    
                    
                      12
                    
                  
                  
                    
                      
                      RubyGems
                    
                    
                      953
                    
                  
                  
                    
                      
                      Rust
                    
                    
                      1,049
                    
                  
                  
                    
                      
                      Swift
                    
                    
                      45
                    
                  
                  Unreviewed advisories
                  
                    
                      
                      All unreviewed
                    
                    
                      5,000+
                    
                  
            Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
      31 advisories
        Filter by severity
        
      
      
    
                    
                      A memory corruption vulnerability exists in the WebP Image Decoding functionality of the SAIL...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-52456
                      
                      was published
                      Aug 26, 2025 
                    
                  
                    
                      A memory corruption vulnerability exists in the PSD Image Decoding functionality of the SAIL...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-53510
                      
                      was published
                      Aug 26, 2025 
                    
                  
                    
                      A memory corruption vulnerability exists in the BMPv3 Image Decoding functionality of the SAIL...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-32468
                      
                      was published
                      Aug 26, 2025 
                    
                  
                    
                      A memory corruption vulnerability exists in the BMPv3 Palette Decoding functionality of the SAIL...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-46407
                      
                      was published
                      Aug 26, 2025 
                    
                  
                    
                      A memory corruption vulnerability exists in the BMPv3 RLE Decoding functionality of the SAIL...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-52930
                      
                      was published
                      Aug 26, 2025 
                    
                  
                    
                      A vulnerability in the web services interface of Cisco Secure Firewall Adaptive Security...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-20263
                      
                      was published
                      Aug 14, 2025 
                    
                  
                    
                      NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-23326
                      
                      was published
                      Aug 6, 2025 
                    
                  
                    
                      A memory corruption vulnerability exists in the Shared String Table Record Parser implementation...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-48877
                      
                      was published
                      Jun 2, 2025 
                    
                  
                    
                      Memory corruption while transmitting packet mapping information with invalid header payload size.
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-21442
                      
                      was published
                      Apr 7, 2025 
                    
                  
                    
                      Buffer overflow vulnerability in the codec module
Impact: Successful exploitation of this...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-58107
                      
                      was published
                      Apr 7, 2025 
                    
                  
                    
                      Integer overflow vulnerability during glTF model loading in the 3D engine module
Impact:...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-56451
                      
                      was published
                      Jan 8, 2025 
                    
                  
                    
                      Memory corruption while processing voice packet with arbitrary data received from ADSP.
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-38422
                      
                      was published
                      Nov 4, 2024 
                    
                  
                    
                      Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics.
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-21454
                      
                      was published
                      Apr 1, 2024 
                    
                  
                    
                      Memory corruption while allocating memory for graphics.
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-21470
                      
                      was published
                      Apr 1, 2024 
                    
                  
                    
                      `AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-2608
                      
                      was published
                      Mar 19, 2024 
                    
                  
                    
                      An issue in Wireshark team Wireshark before v.4.2.0 allows a remote attacker to cause a denial of...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-24478
                      
                      was published
                      Feb 21, 2024 
                    
                  
                    
                      Memory corruption while using the UIM diag command to get the operators name.
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2023-33018
                      
                      was published
                      Dec 5, 2023 
                    
                  
                    
                      Memory corruption while loading an ELF segment in TEE Kernel.
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2023-28585
                      
                      was published
                      Dec 5, 2023 
                    
                  
                    
                      Memory corruption in HLOS while invoking IOCTL calls from user-space.
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2023-33022
                      
                      was published
                      Dec 5, 2023 
                    
                  
                    
                      An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2023-37536
                      
                      was published
                      Oct 11, 2023 
                    
                  
                    
                      Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2023-21644
                      
                      was published
                      Sep 5, 2023 
                    
                  
                    
                      Memory corruption in RIL while trying to send apdu packet.
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2023-21648
                      
                      was published
                      Aug 8, 2023 
                    
                  
                    
                      Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2022-33282
                      
                      was published
                      Apr 13, 2023 
                    
                  
                    
                      Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2022-33296
                      
                      was published
                      Apr 13, 2023 
                    
                  
                    
                      Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2022-25705
                      
                      was published
                      Mar 10, 2023 
                    
                  
        
        ProTip!
        Advisories are also available from the 
        GraphQL API