GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,239
Erlang
31
GitHub Actions
21
Go
2,007
Maven
5,000+
npm
3,716
NuGet
662
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
23 advisories
Filter by severity
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix crash caused...
Moderate
Unreviewed
CVE-2024-49953
was published
Oct 21, 2024
In the Linux kernel, the following vulnerability has been resolved:
ACPI: battery: Fix possible...
Moderate
Unreviewed
CVE-2024-49955
was published
Oct 21, 2024
When the NGINX Plus is configured to use the MQTT pre-read module, undisclosed requests can cause...
High
Unreviewed
CVE-2024-39792
was published
Aug 14, 2024
A flaw was found in the QEMU Virtio PCI Bindings (hw/virtio/virtio-pci.c). An improper release...
Moderate
Unreviewed
CVE-2024-4693
was published
May 14, 2024
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in blockmason credit-protocol. It has...
Moderate
Unreviewed
CVE-2018-25098
was published
Feb 4, 2024
TouchLink packets processed after timeout or out of range due to Operation on a Resource after...
Critical
Unreviewed
CVE-2023-41094
was published
Oct 4, 2023
An issue with app access to camera data was addressed with improved logic. This issue is fixed in...
Low
Unreviewed
CVE-2022-42838
was published
Feb 27, 2023
By using XSL Transforms, a malicious webserver could have served a user an XSL document that...
High
Unreviewed
CVE-2022-22755
was published
Dec 22, 2022
User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can...
Moderate
Unreviewed
CVE-2022-45292
was published
Dec 10, 2022
An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended...
High
Unreviewed
CVE-2022-30256
was published
Nov 19, 2022
A flaw was found in OpenStack. The application credential tokens can be used even after they have...
High
Unreviewed
CVE-2022-2447
was published
Sep 2, 2022
When Responsive Design Mode was enabled, it used references to objects that were previously freed...
High
Unreviewed
CVE-2021-23995
was published
May 24, 2022
A denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack...
High
Unreviewed
CVE-2020-13530
was published
May 24, 2022
get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege...
High
Unreviewed
CVE-2020-25221
was published
May 24, 2022
TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to...
High
Unreviewed
CVE-2019-15691
was published
May 24, 2022
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...
High
Unreviewed
CVE-2017-14895
was published
May 13, 2022
An elevation of privilege vulnerability in CameraBase could enable a local malicious application...
High
Unreviewed
CVE-2017-0544
was published
May 13, 2022
A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.
Moderate
Unreviewed
CVE-2021-42778
was published
Apr 19, 2022
An Operation on a Resource after Expiration or Release vulnerability in the Routing Protocol...
High
Unreviewed
CVE-2022-22197
was published
Apr 15, 2022
Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its...
High
Unreviewed
CVE-2021-33020
was published
Apr 3, 2022
IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user...
High
Unreviewed
CVE-2022-22332
was published
Apr 2, 2022
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),...
High
Unreviewed
CVE-2021-37185
was published
Feb 10, 2022
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),...
High
Unreviewed
CVE-2021-37204
was published
Feb 10, 2022
ProTip!
Advisories are also available from the
GraphQL API