Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,636
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,529
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

585 advisories

Loading
Dell Device Management Agent (DDMA), versions prior to 26.02, contain an Improper Check for... Low Unreviewed
CVE-2026-22760 was published Mar 4, 2026
Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability... High Unreviewed
CVE-2026-2801 was published Feb 24, 2026
A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto... Moderate Unreviewed
CVE-2026-0229 was published Feb 11, 2026
Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device... Moderate Unreviewed
CVE-2025-35992 was published Feb 10, 2026
Improper conditions check in some firmware for some Intel(R) Graphics Drivers and Intel LTS... Low Unreviewed
CVE-2025-32739 was published Feb 10, 2026
Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device... Moderate Unreviewed
CVE-2025-32735 was published Feb 10, 2026
Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 3: User... Low Unreviewed
CVE-2025-33030 was published Feb 10, 2026
Improper conditions check for the Intel(R) Optane(TM) PMem management software before versions... Moderate Unreviewed
CVE-2025-20070 was published Feb 10, 2026
Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig High
CVE-2026-25639 was published for axios (npm) Feb 9, 2026
hackerman70000 Credited to hackerman70000 and FeBe95 FeBe95 FeBe95
Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Group invite allows... Moderate Unreviewed
CVE-2026-0944 was published Feb 4, 2026
openmls has improper tag validation High
GHSA-8x3w-qj7j-gqhf was published for openmls (Rust) Feb 4, 2026
Ollrogge Credited to Ollrogge, brunoproduit, and derconno brunoproduit brunoproduit
derconno derconno
ingress-nginx has Improper Check for Unusual or Exceptional Conditions Low
CVE-2026-24513 was published for k8s.io/ingress-nginx (Go) Feb 4, 2026
In Modem, there is a possible system crash due to an uncaught exception. This could lead to... High Unreviewed
CVE-2026-20406 was published Feb 2, 2026
In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught... High Unreviewed
CVE-2026-20419 was published Feb 2, 2026
In Modem, there is a possible system crash due to an uncaught exception. This could lead to... High Unreviewed
CVE-2026-20401 was published Feb 2, 2026
Improper handling of exceptional conditions in VX800v v1.0 in SIP processing allows an attacker... Moderate Unreviewed
CVE-2025-15542 was published Jan 29, 2026
Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal HTTP Client Manager... Unknown Unreviewed
CVE-2025-14840 was published Jan 28, 2026
Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code... High Unreviewed
CVE-2025-69420 was published Jan 27, 2026
Issue summary: An invalid or NULL pointer dereference can happen in an application processing a... Moderate Unreviewed
CVE-2026-22795 was published Jan 27, 2026
Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS... Moderate Unreviewed
CVE-2026-22796 was published Jan 27, 2026
A vulnerability in the Pix-Link LV-WR21Q router's language module allows remote attackers to... Moderate Unreviewed
CVE-2025-12387 was published Jan 27, 2026
go-tuf affected by client DoS via malformed server response Moderate
CVE-2026-23991 was published for github.com/theupdateframework/go-tuf/v2 (Go) Jan 21, 2026
1seal Credited to 1seal, kommendorkapten, and rdimitrov kommendorkapten kommendorkapten
rdimitrov rdimitrov
An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding... High Unreviewed
CVE-2026-21910 was published Jan 15, 2026
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Juniper DHCP service... Moderate Unreviewed
CVE-2025-59960 was published Jan 15, 2026
An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol... Moderate Unreviewed
CVE-2025-60011 was published Jan 15, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database