Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,941
Erlang
29
GitHub Actions
16
Go
1,722
Maven
4,952
npm
3,481
NuGet
605
pip
3,049
Pub
10
RubyGems
832
Rust
778
Swift
34
Unreviewed advisories
All unreviewed
5,000+

5 advisories

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used... Critical Unreviewed
CVE-2023-38336 was published Jul 15, 2023
Certain NETGEAR devices are affected by denial of service. This affects D3600 before 1.0.0.75,... Low Unreviewed
CVE-2019-20717 was published May 24, 2022
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the... High Unreviewed
CVE-2015-7547 was published May 13, 2022
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects... High Unreviewed
CVE-2021-45553 was published Dec 27, 2021
Improper Limitation of a Pathname ('Path Traversal') in org.apache.jspwiki:jspwiki-war High
CVE-2019-0225 was published for org.apache.jspwiki:jspwiki-war (Maven) Apr 8, 2019
ProTip! Advisories are also available from the GraphQL API