Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,444
Erlang
29
GitHub Actions
16
Go
1,668
Maven
4,928
npm
3,458
NuGet
595
pip
2,874
Pub
10
RubyGems
823
Rust
766
Swift
34
Unreviewed advisories
All unreviewed
5,000+

7 advisories

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.... Moderate Unreviewed
CVE-2018-21148 was published May 24, 2022
curl FTP path confusion leads to NIL byte out of bounds write Critical
CVE-2018-1000120 was published for curl (NuGet) May 14, 2022
joelverhagen
A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code... High Unreviewed
CVE-2018-1000121 was published May 14, 2022
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Sound). The supported... Moderate Unreviewed
CVE-2018-3157 was published May 13, 2022
curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read... Critical Unreviewed
CVE-2018-1000301 was published May 13, 2022
A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling... Critical Unreviewed
CVE-2018-1000122 was published May 13, 2022
libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When... Critical Unreviewed
CVE-2018-1000007 was published Apr 30, 2022
ProTip! Advisories are also available from the GraphQL API