GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
41
Go
3,005
Maven
5,000+
npm
4,733
NuGet
788
pip
4,343
Pub
12
RubyGems
987
Rust
1,137
Swift
50
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
1,085 advisories
Filter by severity
A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the ...
High
Unreviewed
CVE-2025-14905
was published
Feb 23, 2026
Heap buffer overflow in libvpx. This vulnerability affects Firefox < 147.0.4, Firefox ESR < 140.7...
High
Unreviewed
CVE-2026-2447
was published
Feb 16, 2026
GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2026-2047
was published
Feb 21, 2026
GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2026-0797
was published
Feb 21, 2026
Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker...
High
Unreviewed
CVE-2026-2648
was published
Feb 19, 2026
Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker...
High
Unreviewed
CVE-2026-2650
was published
Feb 19, 2026
ALGO 8180 IP Audio Alerter InformaCast Heap-based Buffer Overflow Remote Code Execution...
High
Unreviewed
CVE-2026-0793
was published
Jan 23, 2026
Crypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in...
High
Unreviewed
CVE-2026-2474
was published
Feb 16, 2026
Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution...
High
Unreviewed
CVE-2022-45188
was published
Nov 12, 2022
A heap buffer overflow vulnerability in the UPF component of free5GC v4.0.1 allows remote...
High
Unreviewed
CVE-2025-70122
was published
Feb 13, 2026
Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker...
High
Unreviewed
CVE-2026-2314
was published
Feb 11, 2026
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the...
High
Unreviewed
CVE-2023-4911
was published
Oct 3, 2023
Prime95 version 29.8 build 6 contains a buffer overflow vulnerability in the user ID input field...
High
Unreviewed
CVE-2019-25327
was published
Feb 13, 2026
Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via...
High
Unreviewed
CVE-2026-2007
was published
Feb 12, 2026
Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary...
High
Unreviewed
CVE-2026-2005
was published
Feb 12, 2026
Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows...
High
Unreviewed
CVE-2025-59487
was published
Feb 3, 2026
Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows...
High
Unreviewed
CVE-2025-59482
was published
Feb 3, 2026
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to...
High
Unreviewed
CVE-2026-21246
was published
Feb 10, 2026
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
High
Unreviewed
CVE-2026-21248
was published
Feb 10, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate...
High
Unreviewed
CVE-2026-21259
was published
Feb 10, 2026
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
High
Unreviewed
CVE-2026-21244
was published
Feb 10, 2026
Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized...
High
Unreviewed
CVE-2026-21236
was published
Feb 10, 2026
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges...
High
Unreviewed
CVE-2026-21239
was published
Feb 10, 2026
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges...
High
Unreviewed
CVE-2026-21245
was published
Feb 10, 2026
Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tdpserver modules) allows...
High
Unreviewed
CVE-2025-62673
was published
Feb 3, 2026
ProTip!
Advisories are also available from the
GraphQL API