GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
3,413
Erlang
29
GitHub Actions
16
Go
1,653
Maven
4,915
npm
3,442
NuGet
594
pip
2,832
Pub
10
RubyGems
823
Rust
763
Swift
34
Unreviewed advisories
All unreviewed
5,000+
15 advisories
Filter by severity
net/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a...
Moderate
Unreviewed
CVE-2015-1229
was published
May 17, 2022
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java...
High
Unreviewed
CVE-2015-4731
was published
May 13, 2022
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to...
High
Unreviewed
CVE-2015-4760
was published
May 13, 2022
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to...
Moderate
Unreviewed
CVE-2015-2632
was published
May 13, 2022
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE...
Moderate
Unreviewed
CVE-2015-4749
was published
May 13, 2022
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and...
High
Unreviewed
CVE-2015-2628
was published
May 13, 2022
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and...
High
Unreviewed
CVE-2015-4733
was published
May 13, 2022
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and...
Moderate
Unreviewed
CVE-2015-2621
was published
May 13, 2022
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and...
High
Unreviewed
CVE-2015-4732
was published
May 13, 2022
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE...
Low
Unreviewed
CVE-2015-2625
was published
May 13, 2022
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE...
High
Unreviewed
CVE-2015-4748
was published
May 13, 2022
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and...
High
Unreviewed
CVE-2015-2590
was published
May 13, 2022
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE...
Moderate
Unreviewed
CVE-2015-2601
was published
May 13, 2022
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state...
Moderate
Unreviewed
CVE-2015-2808
was published
May 13, 2022
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on...
Moderate
Unreviewed
CVE-2015-4000
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API