Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,838
Erlang
36
GitHub Actions
33
Go
2,460
Maven
5,000+
npm
4,082
NuGet
723
pip
3,872
Pub
12
RubyGems
943
Rust
1,010
Swift
39
Unreviewed advisories
All unreviewed
5,000+

6,746 advisories

Loading
A vulnerability was found in Tenda AC20 16.03.08.12. This vulnerability affects the function... High Unreviewed
CVE-2025-9088 was published Aug 17, 2025
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling... High Unreviewed
CVE-2023-49906 was published Apr 9, 2024
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling... High Unreviewed
CVE-2023-49909 was published Apr 9, 2024
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling... High Unreviewed
CVE-2023-49910 was published Apr 9, 2024
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling... High Unreviewed
CVE-2023-49912 was published Apr 9, 2024
An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon... High Unreviewed
CVE-2024-22373 was published Apr 25, 2024
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling... High Unreviewed
CVE-2023-49913 was published Apr 9, 2024
A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of... High Unreviewed
CVE-2024-22391 was published Apr 25, 2024
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling... High Unreviewed
CVE-2023-49907 was published Apr 9, 2024
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling... High Unreviewed
CVE-2023-49908 was published Apr 9, 2024
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling... High Unreviewed
CVE-2023-49911 was published Apr 9, 2024
A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350... High Unreviewed
CVE-2023-48724 was published Apr 9, 2024
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in... High Unreviewed
CVE-2025-43300 was published Aug 21, 2025
Out of bounds write in V8 in Google Chrome prior to 139.0.7258.138 allowed a remote attacker to... High Unreviewed
CVE-2025-9132 was published Aug 20, 2025
IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17... High Unreviewed
CVE-2025-2900 was published May 14, 2025
A maliciously crafted 3DM file, when parsed through certain Autodesk products, can force an Out... High Unreviewed
CVE-2025-7675 was published Jul 29, 2025
A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out... High Unreviewed
CVE-2025-6631 was published Jul 29, 2025
A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out... High Unreviewed
CVE-2025-6637 was published Jul 29, 2025
A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based... High Unreviewed
CVE-2025-1651 was published Mar 13, 2025
A maliciously crafted RBG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds... High Unreviewed
CVE-2025-6633 was published Aug 6, 2025
A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out... High Unreviewed
CVE-2025-7497 was published Jul 29, 2025
A maliciously crafted PDF file, when parsed through Autodesk applications, can force a Memory... High Unreviewed
CVE-2025-1277 was published Apr 15, 2025
A maliciously crafted DWG file, when parsed through Autodesk Revit, can cause a Stack-Based... High Unreviewed
CVE-2025-2497 was published Apr 15, 2025
A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a... High Unreviewed
CVE-2025-1656 was published Apr 15, 2025
A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can... High Unreviewed
CVE-2025-1275 was published Apr 15, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database