Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,428
Maven
5,000+
npm
5,000+
NuGet
1,088
pip
5,000+
Pub
13
RubyGems
1,129
Rust
1,506
Swift
62
Unreviewed advisories
All unreviewed
5,000+

1,088 advisories

Loading
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion Low
GHSA-464c-974j-9xm6 was published for @aws-cdk/aws-codebuild (Go) Jul 24, 2026
ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds Moderate
CVE-2026-62946 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
kongzhenhit-code Credited to kongzhenhit-code
ImageMagick: Heap Buffer Over-Write in fx operation Moderate
CVE-2026-62363 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Kwstubbs Credited to Kwstubbs
ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided Moderate
CVE-2026-62343 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Kwstubbs Credited to Kwstubbs
Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass) Moderate
GHSA-p5rm-jg5c-8c77 was published for Microsoft.OpenApi.Kiota (NuGet) Jul 24, 2026
gavinbarron Credited to gavinbarron and gn00295120 gn00295120 gn00295120
Microsoft Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName High
CVE-2026-59866 was published for Microsoft.OpenApi.Kiota (NuGet) Jul 24, 2026
Gal3m Credited to Gal3m, mrostamipoor, baywet, and gavinbarron mrostamipoor mrostamipoor
baywet baywet gavinbarron gavinbarron
Microsoft Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info` Critical
CVE-2026-59865 was published for Microsoft.OpenApi.Kiota (NuGet) Jul 24, 2026
Gal3m Credited to Gal3m, mrostamipoor, gavinbarron, and baywet mrostamipoor mrostamipoor
gavinbarron gavinbarron baywet baywet
Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF High
CVE-2026-59863 was published for Microsoft.OpenApi.Kiota (NuGet) Jul 24, 2026
Gal3m Credited to Gal3m, mrostamipoor, baywet, and gavinbarron mrostamipoor mrostamipoor
baywet baywet gavinbarron gavinbarron
Microsoft Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref High
CVE-2026-59867 was published for Microsoft.OpenApi.Kiota (NuGet) Jul 24, 2026
Gal3m Credited to Gal3m, mrostamipoor, baywet, and gavinbarron mrostamipoor mrostamipoor
baywet baywet gavinbarron gavinbarron
Microsoft Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions Critical
CVE-2026-59864 was published for Microsoft.OpenApi.Kiota (NuGet) Jul 24, 2026
Gal3m Credited to Gal3m, mrostamipoor, jingjingjia-ms, and baywet mrostamipoor mrostamipoor
jingjingjia-ms jingjingjia-ms baywet baywet
Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator High
CVE-2026-59859 was published for Microsoft.OpenApi.Kiota (NuGet) Jul 24, 2026
peombwa Credited to peombwa and thegr1ffyn thegr1ffyn thegr1ffyn
Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator High
CVE-2026-59862 was published for Microsoft.OpenAPI.Kiota (NuGet) Jul 24, 2026
baywet Credited to baywet
Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator High
CVE-2026-59861 was published for Microsoft.OpenAPI.Kiota (NuGet) Jul 24, 2026
baywet Credited to baywet
ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title Low
GHSA-76q6-2p6h-xjqr was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Kwstubbs Credited to Kwstubbs
Microsoft Kiota: XML Doc-Comment Newline Breakout Code Injection High
CVE-2026-59860 was published for Microsoft.OpenApi.Kiota (NuGet) Jul 24, 2026
thegr1ffyn Credited to thegr1ffyn, gavinbarron, and peombwa gavinbarron gavinbarron
peombwa peombwa
ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified Low
GHSA-h5r4-w88w-7ccr was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Bin-infinite Credited to Bin-infinite
ImageMagick: Memory Leak in ICON decoder when allocation fails Low
GHSA-h58x-r7f7-rh84 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory leak in VIFF encoder when allocation fails Low
GHSA-m596-67p7-69wh was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in MIFF encoder when allocaton fails Low
GHSA-r628-69v2-2f9c was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Bin-infinite Credited to Bin-infinite
ImageMagick: Memory Leak in YUV decoder when opening of blob fails Low
GHSA-h7f2-f9cc-h2gv was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in TIFF encoder when an allocation fails Low
GHSA-jfq9-q63x-rc63 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in JNG encoder when a blob could not be opened Low
GHSA-99w9-hv66-rfv7 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in hough lines operation when an operation fails Low
GHSA-j8rh-v2r8-v94x was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ImageMagick: Memory Leak in color transformation to log colorspace when operation fails Low
GHSA-7c7m-fpjw-gwcq was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
Bin-infinite Credited to Bin-infinite
ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created. Low
GHSA-6vxp-gfwf-hcr9 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database