Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,596
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

1,877 advisories

Loading
A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding... High Unreviewed
CVE-2026-102081 was published Oct 14, 2026
An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process... Moderate Unreviewed
CVE-2026-102053 was published Oct 14, 2026
An Improper Release of Memory Before Removing Last Reference vulnerability in the l2cpd process... High Unreviewed
CVE-2026-102051 was published Oct 14, 2026
A Missing Release of Memory after Effective Lifetime vulnerability in the l2ald process of... High Unreviewed
CVE-2026-102032 was published Oct 14, 2026
Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a... Moderate Unreviewed
CVE-2026-101025 was published Oct 14, 2026
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized... High Unreviewed
CVE-2026-83677 was published Oct 13, 2026
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker... High Unreviewed
CVE-2026-70155 was published Oct 13, 2026
Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an... High Unreviewed
CVE-2026-70033 was published Oct 13, 2026
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the wavelet... Moderate Unreviewed
CVE-2026-109278 was published Oct 12, 2026
ImageMagick before 7.1.2-32 contains a memory leak vulnerability in the -process option that... Moderate Unreviewed
CVE-2026-109270 was published Oct 12, 2026
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder... Moderate Unreviewed
CVE-2026-109261 was published Oct 12, 2026
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder,... Moderate Unreviewed
CVE-2026-109260 was published Oct 12, 2026
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder ... Moderate Unreviewed
CVE-2026-109262 was published Oct 12, 2026
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder,... Moderate Unreviewed
CVE-2026-109263 was published Oct 12, 2026
Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in... Moderate Unreviewed
CVE-2026-108748 was published Oct 11, 2026
Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction Moderate
CVE-2026-104874 was published for multidict (pip) Oct 5, 2026
waydeshi Credited to waydeshi
compression vulnerable to Denial of Service via memory leak on premature response close High
CVE-2026-87776 was published for compression (npm) Oct 5, 2026
bjohansebas Credited to bjohansebas, KKamJi98, UlisesGascon, and Phillip9587 KKamJi98 KKamJi98
UlisesGascon UlisesGascon Phillip9587 Phillip9587
Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings. ... Moderate Unreviewed
CVE-2026-94652 was published Oct 2, 2026
Missing release of memory after effective lifetime, Missing release of resource after effective... High Unreviewed
CVE-2026-93926 was published Oct 2, 2026
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an... Moderate Unreviewed
CVE-2026-47566 was published Sep 30, 2026
The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed... High Unreviewed
CVE-2026-102762 was published Sep 29, 2026
An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests... High Unreviewed
CVE-2026-102716 was published Sep 29, 2026
IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18... Moderate Unreviewed
CVE-2026-95395 was published Sep 29, 2026
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process... Moderate Unreviewed
CVE-2026-102006 was published Sep 28, 2026
Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default... Moderate Unreviewed
CVE-2026-102005 was published Sep 28, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database