Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,968
Erlang
29
GitHub Actions
16
Go
1,749
Maven
4,978
npm
3,509
NuGet
609
pip
3,084
Pub
10
RubyGems
832
Rust
782
Swift
34
Unreviewed advisories
All unreviewed
5,000+

323 advisories

Loading
Side-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a... Moderate Unreviewed
CVE-2021-21181 was published May 24, 2022
Improper permissions in the installer for the Intel(R) Brand Verification Tool before version 11... Moderate Unreviewed
CVE-2021-0086 was published May 24, 2022
Observable response discrepancy in some Intel(R) Processors may allow an authorized user to... Moderate Unreviewed
CVE-2021-0089 was published May 24, 2022
In Rust SGX 1.1.3, a side-channel vulnerability in base64 PEM file decoding allows system-level ... Moderate Unreviewed
CVE-2021-24117 was published May 24, 2022
In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system... Moderate Unreviewed
CVE-2021-24116 was published May 24, 2022
In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information... Moderate Unreviewed
CVE-2021-34556 was published May 24, 2022
In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information... Moderate Unreviewed
CVE-2021-35477 was published May 24, 2022
A vulnerability, which was classified as problematic, was found in InSTEDD Nuntium. Affected is... Moderate Unreviewed
CVE-2022-4823 was published Dec 28, 2022
NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized... Moderate Unreviewed
CVE-2021-1109 was published May 24, 2022
In Kaden PICOFLUX Air in all known versions an information exposure through observable... Moderate Unreviewed
CVE-2021-34576 was published May 24, 2022
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to... Moderate Unreviewed
CVE-2021-20376 was published May 24, 2022
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD... Moderate Unreviewed
CVE-2021-26318 was published May 24, 2022
In USB Manager, there is a possible way to determine whether an app is installed, without query... Moderate Unreviewed
CVE-2021-0975 was published Aug 12, 2022
Apache Hive Information Exposure and Observable Timing Discrepancy Moderate
CVE-2020-1926 was published for org.apache.hive:hive (Maven) Feb 9, 2022
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process... Moderate Unreviewed
CVE-2021-38476 was published May 24, 2022
Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). There is... Moderate Unreviewed
CVE-2021-43398 was published May 24, 2022
The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being... Moderate Unreviewed
CVE-2020-1968 was published May 24, 2022
An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1. If a password... Moderate Unreviewed
CVE-2021-20113 was published May 24, 2022
In Framework, there is a possible way to determine whether an app is installed, without query... Moderate Unreviewed
CVE-2022-20324 was published Aug 13, 2022
Observable behavioral discrepancy in some Intel(R) Processors may allow an authorized user to... Moderate Unreviewed
CVE-2021-33149 was published May 13, 2022
While the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was... Moderate Unreviewed
CVE-2022-26382 was published Dec 22, 2022
An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in... Moderate Unreviewed
CVE-2020-35473 was published Nov 8, 2022
All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to... Moderate Unreviewed
CVE-2022-1989 was published Aug 24, 2022
NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use... Moderate Unreviewed
CVE-2022-42288 was published Jan 13, 2023
An information-disclosure vulnerability exists on select NXP devices when configured in Serial... Moderate Unreviewed
CVE-2022-45163 was published Nov 19, 2022
ProTip! Advisories are also available from the GraphQL API