GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
73
GitHub Actions
53
Go
4,004
Maven
5,000+
npm
5,000+
NuGet
974
pip
5,000+
Pub
13
RubyGems
1,069
Rust
1,395
Swift
61
Unreviewed advisories
All unreviewed
5,000+
339,386 advisories
Filter by severity
An operator precedence bug in the kernel results in a scenario where a buffer overflow causes...
High
Unreviewed
CVE-2026-7270
was published
Apr 30, 2026
ASN.1 PER protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial...
Moderate
Unreviewed
CVE-2026-6527
was published
Apr 30, 2026
DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial...
Moderate
Unreviewed
CVE-2026-6530
was published
Apr 30, 2026
iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
Moderate
Unreviewed
CVE-2026-6529
was published
Apr 30, 2026
TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service
Moderate
Unreviewed
CVE-2026-6528
was published
Apr 30, 2026
SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows...
Moderate
Unreviewed
CVE-2026-6531
was published
Apr 30, 2026
USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows...
Moderate
Unreviewed
CVE-2026-6534
was published
Apr 30, 2026
Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...
Moderate
Unreviewed
CVE-2026-6532
was published
Apr 30, 2026
Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows...
Moderate
Unreviewed
CVE-2026-6533
was published
Apr 30, 2026
BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...
Moderate
Unreviewed
CVE-2026-6538
was published
Apr 30, 2026
ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...
Moderate
Unreviewed
CVE-2026-6537
was published
Apr 30, 2026
Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows...
Moderate
Unreviewed
CVE-2026-6535
was published
Apr 30, 2026
DLMS/COSEM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4
Moderate
Unreviewed
CVE-2026-6536
was published
Apr 30, 2026
SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...
Moderate
Unreviewed
CVE-2026-6867
was published
Apr 30, 2026
GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...
Moderate
Unreviewed
CVE-2026-6870
was published
Apr 30, 2026
WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial...
Moderate
Unreviewed
CVE-2026-6869
was published
Apr 30, 2026
When processing the header of an incoming message, libnv failed to properly validate the message...
Critical
Unreviewed
CVE-2026-35547
was published
Apr 30, 2026
Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters. This can...
High
Unreviewed
CVE-2026-7164
was published
Apr 30, 2026
As dhclient is building an environment to pass to dhclient-script, it may need to resize the...
High
Unreviewed
CVE-2026-42512
was published
Apr 30, 2026
Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web...
Moderate
Unreviewed
CVE-2026-41226
was published
Apr 30, 2026
The BOOTP file field is written to the lease file without escaping embedded double-quotes,...
High
Unreviewed
CVE-2026-42511
was published
Apr 30, 2026
Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.
Moderate
Unreviewed
CVE-2026-42798
was published
Apr 30, 2026
MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows...
Moderate
Unreviewed
CVE-2026-6519
was published
Apr 30, 2026
OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14...
Moderate
Unreviewed
CVE-2026-6521
was published
Apr 30, 2026
MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...
Moderate
Unreviewed
CVE-2026-6524
was published
Apr 30, 2026
ProTip!
Advisories are also available from the
GraphQL API