Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,046
Erlang
29
GitHub Actions
18
Go
1,871
Maven
5,000+
npm
3,596
NuGet
638
pip
3,182
Pub
10
RubyGems
852
Rust
809
Swift
35
Unreviewed advisories
All unreviewed
5,000+

10,838 advisories

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of... Low Unreviewed
CVE-2024-42155 was published Jul 30, 2024
A vulnerability was found in TOTOLINK LR1200 9.3.1cu.2832. It has been classified as problematic.... Low Unreviewed
CVE-2024-7216 was published Jul 30, 2024
This issue was addressed with improved data protection. This issue is fixed in watchOS 10.6,... Low Unreviewed
CVE-2024-40795 was published Jul 30, 2024
This issue was addressed with improved redaction of sensitive information. This issue is fixed in... Low Unreviewed
CVE-2024-40798 was published Jul 30, 2024
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. An app... Low Unreviewed
CVE-2024-40832 was published Jul 30, 2024
This issue was addressed by restricting options offered on a locked device. This issue is fixed... Low Unreviewed
CVE-2024-40822 was published Jul 30, 2024
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in... Low Unreviewed
CVE-2024-40777 was published Jul 30, 2024
An authentication issue was addressed with improved state management. This issue is fixed in... Low Unreviewed
CVE-2024-40778 was published Jul 30, 2024
There is a MEDIUM severity vulnerability affecting CPython. The “socket” module provides a pure... Low Unreviewed
CVE-2024-3219 was published Jul 30, 2024
This issue was addressed with improved data protection. This issue is fixed in iOS 17 and iPadOS... Low Unreviewed
CVE-2023-42949 was published Jul 29, 2024
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and... Low Unreviewed
CVE-2023-42957 was published Jul 29, 2024
The issue was addressed with improved restriction of data container access. This issue is fixed... Low Unreviewed
CVE-2023-42925 was published Jul 29, 2024
This issue was addressed through improved state management. This issue is fixed in macOS Sonoma... Low Unreviewed
CVE-2023-42948 was published Jul 29, 2024
Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site... Low Unreviewed
CVE-2024-6620 was published Jul 29, 2024
A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024 and classified as... Low Unreviewed
CVE-2024-7155 was published Jul 28, 2024
An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a... Low Unreviewed
CVE-2024-4786 was published Jul 26, 2024
XMP Toolkit's `XmpFile::close` can trigger undefined behavior Low
GHSA-66fw-43h8-f8p3 was published for xmp_toolkit (Rust) Jul 26, 2024
The kstring integration in gix-attributes is unsound Low
GHSA-cx7h-h87r-jpgr was published for gix-attributes (Rust) Jul 25, 2024
In affected versions of Octopus Server under certain conditions, a user with specific role... Low Unreviewed
CVE-2024-4811 was published Jul 25, 2024
An information disclosure vulnerability in GitLab CE/EE in project/group exports affecting all... Low Unreviewed
CVE-2024-7060 was published Jul 25, 2024
A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior... Low Unreviewed
CVE-2024-0231 was published Jul 25, 2024
IBM InfoSphere Information Server 11.7 could disclose sensitive user information to another user... Low Unreviewed
CVE-2024-37533 was published Jul 24, 2024
There is a low severity open redirect vulnerability within affected versions of Bitbucket Data... Low Unreviewed
CVE-2024-21684 was published Jul 24, 2024
libcurl's URL API function [curl_url_get()](https://curl.se/libcurl/c/curl_url_get.html) offers... Low Unreviewed
CVE-2024-6874 was published Jul 24, 2024
An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the... Low Unreviewed
CVE-2024-3454 was published Jul 24, 2024
ProTip! Advisories are also available from the GraphQL API