Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,238
Erlang
31
GitHub Actions
21
Go
2,005
Maven
5,000+
npm
3,716
NuGet
661
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+

2,810 advisories

Loading
Null pointer dereference in `SparseTensorSliceDataset` High
CVE-2021-37647 was published for tensorflow (pip) Aug 25, 2021
Incorrect validation of `SaveV2` inputs High
CVE-2021-37648 was published for tensorflow (pip) Aug 25, 2021
Null pointer dereference in `UncompressElement` High
CVE-2021-37649 was published for tensorflow (pip) Aug 25, 2021
NPE in TFLite High
CVE-2021-37681 was published for tensorflow (pip) Aug 25, 2021
Null pointer dereference in TFLite High
CVE-2021-37688 was published for tensorflow (pip) Aug 25, 2021
Null pointer dereference in TFLite MLIR optimizations High
CVE-2021-37689 was published for tensorflow (pip) Aug 25, 2021
KateCatlin
Go Ethereum Denial of Service High
CVE-2018-19184 was published for github.com/ethereum/go-ethereum (Go) Jun 29, 2021
Duplicate Advisory: gosaml2 is vulnerable to NULL Pointer Dereference from malformed XML signatures High
GHSA-gq5r-cc4w-g8xf was published for github.com/russellhaering/gosaml2 (Go) Jun 23, 2021 • withdrawn
tdunlap607
Denial-of-Service within Docker container Moderate
CVE-2020-26213 was published for ktbs.dev/teler (Go) May 24, 2021
Nil dereference in NATS JWT causing DoS of nats-server High
GHSA-hmm9-r2m2-qg9w was published for github.com/nats-io/jwt (Go) May 21, 2021
Null dereference in Grappler's `TrySimplify` Low
CVE-2021-29616 was published for tensorflow (pip) May 21, 2021
Null pointer dereference in TFLite's `Reshape` operator Moderate
CVE-2021-29592 was published for tensorflow (pip) May 21, 2021
Heap buffer overflow and undefined behavior in `FusedBatchNorm` Low
CVE-2021-29583 was published for tensorflow (pip) May 21, 2021
Undefined behavior in `MaxPool3DGradGrad` Low
CVE-2021-29574 was published for tensorflow (pip) May 21, 2021
Reference binding to nullptr in `SdcaOptimizer` Low
CVE-2021-29572 was published for tensorflow (pip) May 21, 2021
Reference binding to null in `ParameterizedTruncatedNormal` Low
CVE-2021-29568 was published for tensorflow (pip) May 21, 2021
Null pointer dereference in `SparseFillEmptyRows` Low
CVE-2021-29565 was published for tensorflow (pip) May 21, 2021
Null pointer dereference in `EditDistance` Low
CVE-2021-29564 was published for tensorflow (pip) May 21, 2021
Null pointer dereference in `StringNGrams` Low
CVE-2021-29541 was published for tensorflow (pip) May 21, 2021
Invalid validation in `SparseMatrixSparseCholesky` Low
CVE-2021-29530 was published for tensorflow (pip) May 21, 2021
Session operations in eager mode lead to null pointer dereferences Low
CVE-2021-29518 was published for tensorflow (pip) May 21, 2021
Null pointer dereference via invalid Ragged Tensors Low
CVE-2021-29516 was published for tensorflow (pip) May 21, 2021
Reference binding to null pointer in `MatrixDiag*` ops Low
CVE-2021-29515 was published for tensorflow (pip) May 21, 2021
Type confusion during tensor casts lead to dereferencing null pointers Low
CVE-2021-29513 was published for tensorflow (pip) May 21, 2021
Null pointer dereference in tensorflow-lite High
CVE-2020-15209 was published for tensorflow (pip) Sep 25, 2020
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database