Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,819
Erlang
36
GitHub Actions
32
Go
2,410
Maven
5,000+
npm
4,046
NuGet
723
pip
3,842
Pub
12
RubyGems
933
Rust
1,003
Swift
38
Unreviewed advisories
All unreviewed
5,000+

891 advisories

Loading
Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized... High Unreviewed
CVE-2025-27478 was published Apr 8, 2025
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code... High Unreviewed
CVE-2025-27487 was published Apr 8, 2025
Animate versions 24.0.7, 23.0.10 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2025-27199 was published Apr 8, 2025
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to... High Unreviewed
CVE-2025-27477 was published Apr 8, 2025
Photoshop Desktop versions 25.12.1, 26.4.1 and earlier are affected by a Heap-based Buffer... High Unreviewed
CVE-2025-27198 was published Apr 8, 2025
Premiere Pro versions 25.1, 24.6.4 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2025-27196 was published Apr 8, 2025
Media Encoder versions 25.1, 24.6.4 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2025-27195 was published Apr 8, 2025
Bridge versions 14.1.5, 15.0.2 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2025-27193 was published Apr 8, 2025
Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally. High Unreviewed
CVE-2025-26674 was published Apr 8, 2025
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an... High Unreviewed
CVE-2025-26668 was published Apr 8, 2025
Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally. High Unreviewed
CVE-2025-26666 was published Apr 8, 2025
Integer overflow or wraparound in Windows USB Print Driver allows an authorized attacker to... High Unreviewed
CVE-2025-26639 was published Apr 8, 2025
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to... High Unreviewed
CVE-2025-21221 was published Apr 8, 2025
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to... High Unreviewed
CVE-2025-21222 was published Apr 8, 2025
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to... High Unreviewed
CVE-2025-21205 was published Apr 8, 2025
A heap buffer overflow vulnerability has been identified in thesmooth2() in cmsgamma.c in lcms2-2... High Unreviewed
CVE-2025-29070 was published Apr 1, 2025
A heap buffer overflow vulnerability has been identified in the lcms2-2.16. The vulnerability... High Unreviewed
CVE-2025-29069 was published Apr 1, 2025
Luxion KeyShot DAE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.... High Unreviewed
CVE-2025-2531 was published Mar 25, 2025
The various bson_append functions in the MongoDB C driver library may be susceptible to buffer... High Unreviewed
CVE-2025-0755 was published Mar 18, 2025
A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based... High Unreviewed
CVE-2025-1651 was published Mar 13, 2025
A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based... High Unreviewed
CVE-2025-1429 was published Mar 13, 2025
Delta Electronics CNCSoft-G2 Version 2.1.0.16 and prior lacks proper validation of the length of... High Unreviewed
CVE-2024-12858 was published Mar 13, 2025
Ashlar-Vellum Cobalt VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution... High Unreviewed
CVE-2025-2019 was published Mar 11, 2025
Substance3D - Modeler versions 1.15.0 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2025-27173 was published Mar 11, 2025
InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer... High Unreviewed
CVE-2025-27171 was published Mar 11, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database