Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,440
Erlang
29
GitHub Actions
16
Go
1,665
Maven
4,925
npm
3,453
NuGet
594
pip
2,854
Pub
10
RubyGems
823
Rust
764
Swift
34
Unreviewed advisories
All unreviewed
5,000+

6 advisories

git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL... High Unreviewed
CVE-2017-12976 was published May 14, 2022
http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted... High Unreviewed
CVE-2017-17459 was published May 13, 2022
Dulwich RCE Vulnerability Critical
CVE-2017-16228 was published for dulwich (pip) May 13, 2022
Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary... High Unreviewed
CVE-2017-14176 was published May 13, 2022
CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to... High Unreviewed
CVE-2017-12836 was published May 13, 2022
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and... High Unreviewed
CVE-2018-12836 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API