Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,636
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,529
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

80 advisories

Loading
ImageMagick: Memory Leak when providing invalid options to the cli Low
GHSA-cvhv-g4rq-3hmw was published for Magick.NET-Q16-AnyCPU (NuGet) Sep 2, 2026
007bsd Credited to 007bsd
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion Low
GHSA-464c-974j-9xm6 was published for @aws-cdk/aws-codebuild (Go) Jul 24, 2026
ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title Low
GHSA-76q6-2p6h-xjqr was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Kwstubbs Credited to Kwstubbs
ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified Low
GHSA-h5r4-w88w-7ccr was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Bin-infinite Credited to Bin-infinite
ImageMagick: Memory Leak in ICON decoder when allocation fails Low
GHSA-h58x-r7f7-rh84 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory leak in VIFF encoder when allocation fails Low
GHSA-m596-67p7-69wh was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in MIFF encoder when allocaton fails Low
GHSA-r628-69v2-2f9c was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Bin-infinite Credited to Bin-infinite
ImageMagick: Memory Leak in YUV decoder when opening of blob fails Low
GHSA-h7f2-f9cc-h2gv was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in TIFF encoder when an allocation fails Low
GHSA-jfq9-q63x-rc63 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in JNG encoder when a blob could not be opened Low
GHSA-99w9-hv66-rfv7 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in hough lines operation when an operation fails Low
GHSA-j8rh-v2r8-v94x was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in color transformation to log colorspace when operation fails Low
GHSA-7c7m-fpjw-gwcq was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Bin-infinite Credited to Bin-infinite
ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created. Low
GHSA-6vxp-gfwf-hcr9 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Information Disclosure when printing profiles with debug enabled Low
GHSA-hwf3-r46v-5ggx was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Bin-infinite Credited to Bin-infinite
ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails Low
GHSA-qvxh-prvr-85w2 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
RigelYoung Credited to RigelYoung
ImageMagick: Use-After-Free when freetype initialization fails Low
GHSA-6jwg-7q3p-5fqm was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
RigelYoung Credited to RigelYoung
ImageMagick: Policy Bypass in script operation due to missing checks Low
GHSA-vghg-5jrg-2398 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check Low
GHSA-v3j6-27vc-7pw2 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
ImageMagick: Heap-use-after-free via XMP profile could result in a crash Low
GHSA-qh5g-q395-cx4j was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
ImageMagick: Policy Bypass possible with matrix-backed operations Low
GHSA-rvhp-75f6-9jqh was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding Low
CVE-2026-50268 was published for Steeltoe.Configuration.Encryption (NuGet) Jul 2, 2026
CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass Low
CVE-2026-54780 was published for CoreWCF.Primitives (NuGet) Jun 19, 2026
ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse Low
GHSA-qv2q-c278-pch5 was published for Magick.NET-Q16-AnyCPU (NuGet) May 21, 2026
007bsd Credited to 007bsd and LuiginoC LuiginoC LuiginoC
ImageMagick: Division by Zero in binomial kernel Low
GHSA-vf33-6r7x-66xx was published for Magick.NET-Q16-AnyCPU (NuGet) May 21, 2026
007bsd Credited to 007bsd
Zio has SubFileSystem Path Confinement Bypass via Unresolved `..` Segment Low
GHSA-h39g-6x3c-7fq9 was published for Zio (NuGet) Apr 18, 2026
SUT0L Credited to SUT0L
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database