Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,596
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

83 advisories

Loading
Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests Low
CVE-2026-105795 was published for Microsoft.OpenApi.Kiota (NuGet) Oct 6, 2026
gavinbarron Credited to gavinbarron and adrian05-ms adrian05-ms adrian05-ms
ImageMagick: Memory Leak when providing invalid options to the cli Low
GHSA-cvhv-g4rq-3hmw was published for Magick.NET-Q16-AnyCPU (NuGet) Sep 2, 2026
007bsd Credited to 007bsd and Junaid-PK Junaid-PK Junaid-PK
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion Low
GHSA-464c-974j-9xm6 was published for @aws-cdk/aws-codebuild (Go) Jul 24, 2026
ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title Low
GHSA-76q6-2p6h-xjqr was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Kwstubbs Credited to Kwstubbs
ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified Low
GHSA-h5r4-w88w-7ccr was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Bin-infinite Credited to Bin-infinite
ImageMagick: Memory Leak in ICON decoder when allocation fails Low
GHSA-h58x-r7f7-rh84 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory leak in VIFF encoder when allocation fails Low
GHSA-m596-67p7-69wh was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in MIFF encoder when allocaton fails Low
GHSA-r628-69v2-2f9c was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Bin-infinite Credited to Bin-infinite
ImageMagick: Memory Leak in YUV decoder when opening of blob fails Low
GHSA-h7f2-f9cc-h2gv was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in TIFF encoder when an allocation fails Low
GHSA-jfq9-q63x-rc63 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in JNG encoder when a blob could not be opened Low
GHSA-99w9-hv66-rfv7 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in hough lines operation when an operation fails Low
GHSA-j8rh-v2r8-v94x was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in color transformation to log colorspace when operation fails Low
GHSA-7c7m-fpjw-gwcq was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Bin-infinite Credited to Bin-infinite
ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created. Low
GHSA-6vxp-gfwf-hcr9 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Information Disclosure when printing profiles with debug enabled Low
GHSA-hwf3-r46v-5ggx was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Bin-infinite Credited to Bin-infinite
ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails Low
GHSA-qvxh-prvr-85w2 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
RigelYoung Credited to RigelYoung
ImageMagick: Use-After-Free when freetype initialization fails Low
GHSA-6jwg-7q3p-5fqm was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
RigelYoung Credited to RigelYoung
ImageMagick: Policy Bypass in script operation due to missing checks Low
GHSA-vghg-5jrg-2398 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check Low
GHSA-v3j6-27vc-7pw2 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
ImageMagick: Heap-use-after-free via XMP profile could result in a crash Low
GHSA-qh5g-q395-cx4j was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
ImageMagick: Policy Bypass possible with matrix-backed operations Low
GHSA-rvhp-75f6-9jqh was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding Low
CVE-2026-50268 was published for Steeltoe.Configuration.Encryption (NuGet) Jul 2, 2026
Duplicate Advisory: ImageMagick: Memory leak in coders/txt.c without freetype Low
GHSA-98gv-6gmj-cm6m was published for Magick.NET-Q16-AnyCPU (NuGet) Jun 23, 2026 • withdrawn
Duplicate Advisory: ImageMagick: SVG-to-MVG Command Injection via coders/svg.c Low
GHSA-v772-658q-978p was published for Magick.NET-Q16-AnyCPU (NuGet) Jun 23, 2026 • withdrawn
CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass Low
CVE-2026-54780 was published for CoreWCF.Primitives (NuGet) Jun 19, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database