Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
41
Go
3,003
Maven
5,000+
npm
4,732
NuGet
788
pip
4,341
Pub
12
RubyGems
987
Rust
1,137
Swift
50
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,378 advisories

Loading
GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2026-2047 was published Feb 21, 2026
GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2026-0797 was published Feb 21, 2026
Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker... High Unreviewed
CVE-2026-2648 was published Feb 19, 2026
Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker... High Unreviewed
CVE-2026-2650 was published Feb 19, 2026
Crypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in... High Unreviewed
CVE-2026-2474 was published Feb 16, 2026
Heap buffer overflow in libvpx. This vulnerability affects Firefox < 147.0.4, Firefox ESR < 140.7... High Unreviewed
CVE-2026-2447 was published Feb 16, 2026
A heap buffer overflow vulnerability in the UPF component of free5GC v4.0.1 allows remote... High Unreviewed
CVE-2025-70122 was published Feb 13, 2026
Prime95 version 29.8 build 6 contains a buffer overflow vulnerability in the user ID input field... High Unreviewed
CVE-2019-25327 was published Feb 13, 2026
Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via... High Unreviewed
CVE-2026-2007 was published Feb 12, 2026
Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary... High Unreviewed
CVE-2026-2005 was published Feb 12, 2026
Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker... High Unreviewed
CVE-2026-2314 was published Feb 11, 2026
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker... Low Unreviewed
CVE-2025-57709 was published Feb 11, 2026
InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2026-21357 was published Feb 10, 2026
InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow... Moderate Unreviewed
CVE-2026-21358 was published Feb 10, 2026
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. High Unreviewed
CVE-2026-21244 was published Feb 10, 2026
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to... High Unreviewed
CVE-2026-21246 was published Feb 10, 2026
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. High Unreviewed
CVE-2026-21248 was published Feb 10, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate... High Unreviewed
CVE-2026-21259 was published Feb 10, 2026
Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized... High Unreviewed
CVE-2026-21236 was published Feb 10, 2026
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges... High Unreviewed
CVE-2026-21239 was published Feb 10, 2026
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges... High Unreviewed
CVE-2026-21245 was published Feb 10, 2026
A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran ... High Unreviewed
CVE-2026-23719 was published Feb 10, 2026
Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability in the registration key... High Unreviewed
CVE-2020-37162 was published Feb 7, 2026
Buffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this... Moderate Unreviewed
CVE-2026-24922 was published Feb 6, 2026
Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of... High Unreviewed
CVE-2026-24925 was published Feb 6, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database