GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,407
Maven
5,000+
npm
5,000+
NuGet
1,049
pip
5,000+
Pub
13
RubyGems
1,128
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+
39 advisories
Filter by severity
Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule
Low
CVE-2025-10994
was published
for
openbabel
(pip)
Jun 30, 2026
Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge
Low
CVE-2026-2705
was published
for
openbabel
(pip)
Jun 30, 2026
Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString
Low
CVE-2026-2704
was published
for
openbabel
(pip)
Jun 30, 2026
omec-project amf Vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer
Low
CVE-2026-9301
was published
for
github.com/omec-project/amf
(Go)
May 26, 2026
omec-project amf Vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer
Low
CVE-2026-9299
was published
for
github.com/omec-project/amf
(Go)
May 26, 2026
omec-project amf Vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer
Low
CVE-2026-9300
was published
for
github.com/omec-project/amf
(Go)
May 26, 2026
AMF Improperly Restricts Operations within the Bounds of a Memory Buffer
Low
CVE-2026-8779
was published
for
github.com/omec-project/amf
(Go)
May 18, 2026
AMF Improperly Restricts Operations within the Bounds of a Memory Buffer
Low
CVE-2026-8780
was published
for
github.com/omec-project/amf
(Go)
May 18, 2026
omec-project amf crashes when processing malformed LocationReports
Low
CVE-2026-8349
was published
for
github.com/omec-project/amf
(Go)
May 12, 2026
OSGeo gdal has a heap-based buffer overflow
Low
CVE-2026-8212
was published
for
GDAL
(pip)
May 10, 2026
OSGeo GDAL vulnerable to out-of-bounds read
Low
CVE-2026-8088
was published
for
GDAL
(pip)
May 7, 2026
OSGeo GDAL vulnerable to heap-based buffer overflow
Low
CVE-2026-8087
was published
for
GDAL
(pip)
May 7, 2026
Wasmtime has data leakage between pooling allocator instances
Low
CVE-2026-34988
was published
for
wasmtime
(Rust)
Apr 9, 2026
aws-kms-tls-auth vulnerable to memory overallocation
Low
GHSA-5whh-4q9j-7v28
was published
for
aws-kms-tls-auth
(Rust)
Mar 3, 2026
Duplicate Advisory: Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge
Low
GHSA-3f56-w4g2-mx64
was published
for
openbabel
(pip)
Feb 19, 2026
•
withdrawn
Duplicate Advisory: Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString
Low
GHSA-2m54-8m6g-qf93
was published
for
openbabel
(pip)
Feb 19, 2026
•
withdrawn
Open Chinese Convert has Out-of-bounds Write
Low
CVE-2025-15536
was published
for
opencc
(npm)
Jan 18, 2026
AcademySoftwareFoundation OpenColorIO has an out-of-bounds vulnerability
Low
CVE-2025-15506
was published
for
opencolorio
(pip)
Jan 11, 2026
orx-pinned-vec has undefined behavior in index_of_ptr with empty slices
Low
GHSA-h5j3-crg5-8jqm
was published
for
orx-pinned-vec
(Rust)
Oct 21, 2025
wrflib has a soundness issue and is unmaintained
Low
GHSA-466c-pfvv-v83g
was published
for
wrflib
(Rust)
Oct 3, 2025
Duplicate Advisory: Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow
Low
GHSA-5gfq-xrq4-34rj
was published
for
openbabel
(pip)
Sep 26, 2025
•
withdrawn
Duplicate Advisory: Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule
Low
GHSA-5fgf-q57f-wwqf
was published
for
openbabel
(pip)
Sep 26, 2025
•
withdrawn
Duplicate Advisory: Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles
Low
GHSA-9p6c-jcw8-x98f
was published
for
openbabel
(pip)
Sep 26, 2025
•
withdrawn
Duplicate Advisory: Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies
Low
GHSA-95gx-jmhp-5p29
was published
for
openbabel
(pip)
Sep 26, 2025
•
withdrawn
sparklemotion nokogiri hashmap.c hashmap_get_with_hash heap-based overflow
Low
CVE-2025-6494
was published
for
nokogiri
(RubyGems)
Jun 23, 2025
•
withdrawn
ProTip!
Advisories are also available from the
GraphQL API