Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,191
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,586
Rust
21

1,191 advisories

Loading
Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability High
GHSA-p3jp-9v83-76w9 was published for Microsoft.DotNet.ILCompiler (NuGet) Nov 3, 2026
Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution High
CVE-2026-62848 was published for Metalama.Framework (NuGet) Nov 3, 2026
MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified) Moderate
GHSA-473q-m89c-ghf8 was published for MySqlConnector (NuGet) Oct 28, 2026
rusher Credited to rusher
TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization High
CVE-2026-116675 was published for TinyMCE (Composer) Oct 27, 2026
farisv Credited to farisv and secalert secalert secalert
MessagePack: Nested arrays can blow past buffer length limits Moderate
CVE-2026-92707 was published for MessagePack (NuGet) Oct 15, 2026
AArnott Credited to AArnott
Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion High
CVE-2026-72923 was published for Microsoft.OpenApi.Readers (NuGet) Oct 14, 2026
baywet Credited to baywet, gavinbarron, and myDosGyarados gavinbarron gavinbarron
myDosGyarados myDosGyarados
Metalama allows local code execution through DLL planting in shared temporary directories Moderate
CVE-2026-62847 was published for Metalama.Framework (NuGet) Oct 14, 2026
Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-70035 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability High
CVE-2026-70186 was published for Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-70007 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-87697 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability High
CVE-2026-96225 was published for Microsoft.NETCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability High
CVE-2026-96230 was published for Microsoft.AspNetCore.Components.WebAssembly.Server (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege Vulnerability High
CVE-2026-70179 was published for Microsoft.AspNetCore.Authentication.Negotiate (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-96224 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-85363 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability High
CVE-2026-96959 was published for System.Security.Cryptography.Xml (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-83520 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-70174 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure Vulnerability High
CVE-2026-96232 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure Vulnerability Moderate
CVE-2026-96234 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure Vulnerability Moderate
CVE-2026-96229 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability High
CVE-2026-96235 was published for Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability High
CVE-2026-96222 was published for System.Security.Cryptography.Xml (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability High
CVE-2026-96231 was published for Microsoft.NETCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database