Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,248
Erlang
31
GitHub Actions
21
Go
2,016
Maven
5,000+
npm
3,721
NuGet
662
pip
3,400
Pub
11
RubyGems
890
Rust
852
Swift
36
Unreviewed advisories
All unreviewed
5,000+

1,435 advisories

Loading
A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel,... High Unreviewed
CVE-2023-3397 was published Nov 1, 2023
In tbd of tbd, there is a possible memory corruption due to a race condition. This could lead to... Moderate Unreviewed
CVE-2023-35645 was published Oct 11, 2023
Harbor timing attack risk Moderate
CVE-2023-20902 was published for github.com/goharbor/harbor (Go) Oct 10, 2023
Windows Runtime Remote Code Execution Vulnerability High Unreviewed
CVE-2023-36902 was published Oct 10, 2023
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability High Unreviewed
CVE-2023-41774 was published Oct 10, 2023
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability High Unreviewed
CVE-2023-41773 was published Oct 10, 2023
Windows Graphics Component Elevation of Privilege Vulnerability High Unreviewed
CVE-2023-38159 was published Oct 10, 2023
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability High Unreviewed
CVE-2023-41768 was published Oct 10, 2023
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability High Unreviewed
CVE-2023-41767 was published Oct 10, 2023
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability High Unreviewed
CVE-2023-41769 was published Oct 10, 2023
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability High Unreviewed
CVE-2023-41771 was published Oct 10, 2023
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability High Unreviewed
CVE-2023-38166 was published Oct 10, 2023
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability High Unreviewed
CVE-2023-41770 was published Oct 10, 2023
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability High Unreviewed
CVE-2023-41765 was published Oct 10, 2023
Win32k Elevation of Privilege Vulnerability High Unreviewed
CVE-2023-36776 was published Oct 10, 2023
A race condition in a network transport subsystem led to a heap use-after-free issue in... Moderate Unreviewed
CVE-2023-38537 was published Oct 4, 2023
A race condition in an event subsystem led to a heap use-after-free issue in established audio... Moderate Unreviewed
CVE-2023-38538 was published Oct 4, 2023
A flaw was found in the Linux Kernel's memory management subsytem. A task exits and releases a... Moderate Unreviewed
CVE-2023-4732 was published Oct 3, 2023
A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by... Moderate Unreviewed
CVE-2023-5313 was published Sep 30, 2023
A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between... Moderate Unreviewed
CVE-2023-42756 was published Sep 28, 2023
Vulnerability of mutex management in the bone voice ID trusted application (TA) module.... Low Unreviewed
CVE-2023-41306 was published Sep 27, 2023
A race condition was addressed with improved locking. This issue is fixed in macOS Sonoma 14. An... Moderate Unreviewed
CVE-2023-41979 was published Sep 27, 2023
A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net... Moderate Unreviewed
CVE-2023-3301 was published Sep 13, 2023
OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of... High Unreviewed
CVE-2023-41915 was published Sep 10, 2023
A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura... High Unreviewed
CVE-2023-38616 was published Sep 6, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database