Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,620
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

51 advisories

Loading
An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper... Critical Unreviewed
CVE-2026-102062 was published Oct 14, 2026
A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy... Critical Unreviewed
CVE-2026-76753 was published Oct 6, 2026
Use of an Externally Controlled Format String in the ASUS Router modules allow a remote... Critical Unreviewed
CVE-2026-14157 was published Oct 1, 2026
Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking... Critical Unreviewed
CVE-2026-76722 was published Sep 29, 2026
Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core... Critical Unreviewed
CVE-2026-18461 was published Sep 22, 2026
Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished... Critical Unreviewed
CVE-2026-63073 was published Aug 25, 2026
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary... Critical Unreviewed
CVE-2026-17136 was published Aug 21, 2026
SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception:... Critical Unreviewed
CVE-2024-58366 was published Jul 18, 2026
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv:... Critical Unreviewed
CVE-2024-35845 was published May 17, 2024
Successful exploitation of the string injection vulnerability could allow an attacker to obtain... Critical Unreviewed
CVE-2026-3008 was published Apr 27, 2026
A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7... Critical Unreviewed
CVE-2024-23113 was published Feb 15, 2024
SOUND4 LinkAndShare Transmitter 1.1.2 contains a format string vulnerability that allows... Critical Unreviewed
CVE-2023-53966 was published Dec 23, 2025
The HttpRequest object allows to get the HTTP headers from the server's response after sending... Critical Unreviewed
CVE-2024-42330 was published Nov 27, 2024
ComSndFTP FTP Server version 1.3.7 Beta contains a format string vulnerability in its handling of... Critical Unreviewed
CVE-2012-10055 was published Aug 13, 2025
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows... Critical Unreviewed
CVE-2025-40600 was published Jul 30, 2025
Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a... Critical Unreviewed
CVE-2017-0898 was published May 14, 2022
A post-authentication format string vulnerability in SonicOS management allows a remote attacker... Critical Unreviewed
CVE-2024-12805 was published Jan 9, 2025
The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as... Critical Unreviewed
CVE-2017-12588 was published May 17, 2022
In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered.... Critical Unreviewed
CVE-2024-9129 was published Oct 22, 2024
It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This... Critical Unreviewed
CVE-2023-35087 was published Jul 21, 2023
On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can... Critical Unreviewed
CVE-2023-2186 was published Jun 7, 2023
An issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01. There is a Use of an... Critical Unreviewed
CVE-2019-12297 was published May 24, 2022
A vulnerability, which was classified as critical, was found in ayttm up to 0.5.0.89. This... Critical Unreviewed
CVE-2015-10088 was published Mar 5, 2023
A vulnerability regarding use of externally-controlled format string is found in the cgi... Critical Unreviewed
CVE-2023-5746 was published Oct 25, 2023
In BIG-IP starting in versions 17.0.0, 16.1.2.2, 15.1.5.1, 14.1.4.6, and 13.1.5 on their... Critical Unreviewed
CVE-2023-22374 was published Feb 1, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database