GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
2,000
Maven
5,000+
npm
3,711
NuGet
661
pip
3,383
Pub
11
RubyGems
885
Rust
849
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
5,402 advisories
Filter by severity
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before...
High
Unreviewed
CVE-2022-41742
was published
Oct 20, 2022
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before...
High
Unreviewed
CVE-2022-41741
was published
Oct 20, 2022
Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the ...
High
Unreviewed
CVE-2017-16302
was published
Jan 12, 2023
The APDFL.dll contains a memory corruption vulnerability while parsing specially crafted PDF...
High
Unreviewed
CVE-2022-3161
was published
Jan 13, 2023
Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the ...
High
Unreviewed
CVE-2017-16267
was published
Jan 12, 2023
Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the ...
High
Unreviewed
CVE-2017-16301
was published
Jan 12, 2023
Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the ...
High
Unreviewed
CVE-2017-16260
was published
Jan 12, 2023
Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the ...
High
Unreviewed
CVE-2017-16257
was published
Jan 12, 2023
Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to an out-of...
High
Unreviewed
CVE-2022-3087
was published
Jan 17, 2023
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe...
High
Unreviewed
CVE-2016-4152
was published
May 13, 2022
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe...
High
Unreviewed
CVE-2016-4155
was published
May 13, 2022
xhtml_translate_entity in xhtml.c in epub2txt (aka epub2txt2) through 2.02 allows a stack-based...
High
Unreviewed
CVE-2022-23850
was published
Jan 24, 2022
A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an...
High
Unreviewed
CVE-2022-25293
was published
Feb 25, 2022
A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an...
High
Unreviewed
CVE-2022-25292
was published
Feb 25, 2022
A vulnerability has been identified in JT2Go (All versions), Solid Edge SE2021 (All versions <...
High
Unreviewed
CVE-2021-44000
was published
Feb 10, 2022
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function...
High
Unreviewed
CVE-2022-25546
was published
Mar 11, 2022
A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader,...
High
Unreviewed
CVE-2022-22150
was published
Feb 11, 2022
In video decoder, there is a possible out of bounds write due to a missing bounds check. This...
High
Unreviewed
CVE-2022-20047
was published
Mar 11, 2022
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This...
High
Unreviewed
CVE-2022-20055
was published
Mar 11, 2022
In video decoder, there is a possible out of bounds write due to a missing bounds check. This...
High
Unreviewed
CVE-2022-20048
was published
Mar 11, 2022
Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One ...
High
Unreviewed
CVE-2022-21124
was published
Mar 11, 2022
Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function...
High
Unreviewed
CVE-2021-46408
was published
Mar 11, 2022
A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and...
High
Unreviewed
CVE-2022-0903
was published
Mar 11, 2022
Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One ...
High
Unreviewed
CVE-2022-25234
was published
Mar 11, 2022
There is a heap-based buffer overflow vulnerability in system components. Successful exploitation...
High
Unreviewed
CVE-2021-40064
was published
Mar 11, 2022
ProTip!
Advisories are also available from the
GraphQL API