GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,033
Erlang
29
GitHub Actions
18
Go
1,843
Maven
5,000+
npm
3,580
NuGet
634
pip
3,162
Pub
10
RubyGems
849
Rust
801
Swift
34
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
42 advisories
Filter by severity
An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to...
High
Unreviewed
CVE-2024-5000
was published
Jun 4, 2024
An Incorrect Calculation of Buffer Size vulnerability in Juniper Networks Junos OS SRX 5000...
High
Unreviewed
CVE-2024-30405
was published
Apr 12, 2024
In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP ...
High
Unreviewed
CVE-2023-52557
was published
Mar 1, 2024
In the Linux kernel, the following vulnerability has been resolved:
media: staging/intel-ipu3:...
High
Unreviewed
CVE-2021-46943
was published
Feb 27, 2024
Undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. For the...
High
Unreviewed
CVE-2024-23805
was published
Feb 14, 2024
A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko...
High
Unreviewed
CVE-2023-6387
was published
Feb 2, 2024
Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements...
High
Unreviewed
CVE-2023-30575
was published
Jun 7, 2023
Information disclosure in modem due to buffer over-read while processing packets from DNS server
High
Unreviewed
CVE-2022-25731
was published
Apr 13, 2023
This vulnerability allows remote attackers to execute arbitrary code on affected installations of...
High
Unreviewed
CVE-2022-24908
was published
Mar 28, 2023
This vulnerability allows remote attackers to execute arbitrary code on affected installations of...
High
Unreviewed
CVE-2022-24907
was published
Mar 28, 2023
Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.
High
Unreviewed
CVE-2023-1175
was published
Mar 4, 2023
In PHP versions prior to 7.4.33, 8.0.25 and 8.2.12, when using imageloadfont() function in gd...
High
Unreviewed
CVE-2022-31630
was published
Nov 14, 2022
Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur...
High
Unreviewed
CVE-2021-35134
was published
Sep 3, 2022
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS)....
High
Unreviewed
CVE-2020-36475
was published
May 24, 2022
There is an Incorrect Calculation of Buffer Size Vulnerability in Huawei Smartphone.Successful...
High
Unreviewed
CVE-2021-22415
was published
May 24, 2022
There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of...
High
Unreviewed
CVE-2021-22391
was published
May 24, 2022
There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of...
High
Unreviewed
CVE-2021-22392
was published
May 24, 2022
An out-of-bounds write vulnerability exists in the JPG sof_nb_comp header processing...
High
Unreviewed
CVE-2021-21793
was published
May 24, 2022
Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not...
High
Unreviewed
CVE-2020-11240
was published
May 24, 2022
An out-of-bounds write vulnerability exists in the SGI Format Buffer Size Processing...
High
Unreviewed
CVE-2021-21776
was published
May 24, 2022
An out-of-bounds write vulnerability exists in the TIFF header count-processing functionality of...
High
Unreviewed
CVE-2021-21773
was published
May 24, 2022
An out-of-bounds write vulnerability exists in the SGI format buffer size processing...
High
Unreviewed
CVE-2021-21782
was published
May 24, 2022
An out-of-bounds write vulnerability exists in the PSD Header processing functionality of...
High
Unreviewed
CVE-2020-13585
was published
May 24, 2022
Microsoft Defender Remote Code Execution Vulnerability
High
Unreviewed
CVE-2021-1647
was published
May 24, 2022
Windows Kernel Local Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2020-17087
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API