Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

6,761 advisories

Loading
After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read... Moderate Unreviewed
CVE-2025-27184 was published Apr 8, 2025
After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read... Moderate Unreviewed
CVE-2025-27187 was published Apr 8, 2025
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized... High Unreviewed
CVE-2025-26669 was published Apr 8, 2025
Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate... High Unreviewed
CVE-2025-26675 was published Apr 8, 2025
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. High Unreviewed
CVE-2025-26642 was published Apr 8, 2025
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat... High Unreviewed
CVE-2025-3288 was published Apr 8, 2025
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack... High Unreviewed
CVE-2025-3287 was published Apr 8, 2025
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat... High Unreviewed
CVE-2025-3286 was published Apr 8, 2025
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat... High Unreviewed
CVE-2025-3285 was published Apr 8, 2025
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds... Low Unreviewed
CVE-2025-22452 was published Apr 7, 2025
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds... Low Unreviewed
CVE-2025-22842 was published Apr 7, 2025
in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release... Low Unreviewed
CVE-2025-27534 was published Apr 7, 2025
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds... Low Unreviewed
CVE-2025-20102 was published Apr 7, 2025
Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the... Moderate Unreviewed
CVE-2025-32365 was published Apr 7, 2025
Memory corruption while IOCTL call is invoked from user-space to read board data. High Unreviewed
CVE-2025-21438 was published Apr 7, 2025
In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could... Moderate Unreviewed
CVE-2025-20662 was published Apr 7, 2025
In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could... Moderate Unreviewed
CVE-2025-20661 was published Apr 7, 2025
In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could... Moderate Unreviewed
CVE-2025-20660 was published Apr 7, 2025
In Modem, there is a possible system crash due to improper input validation. This could lead to... High Unreviewed
CVE-2025-20659 was published Apr 7, 2025
In keymaster, there is a possible out of bounds read due to a missing bounds check. This could... Moderate Unreviewed
CVE-2025-20655 was published Apr 7, 2025
A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as... Moderate Unreviewed
CVE-2025-3160 was published Apr 3, 2025
In the Linux kernel, the following vulnerability has been resolved: can: ucan: fix out of bound... Moderate Unreviewed
CVE-2025-22003 was published Apr 3, 2025
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing... High Unreviewed
CVE-2025-2784 was published Apr 3, 2025
In the Linux kernel, the following vulnerability has been resolved: iscsi_ibft: Fix UBSAN shift... High Unreviewed
CVE-2025-21993 was published Apr 2, 2025
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of... High Unreviewed
CVE-2025-21985 was published Apr 1, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database