Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,968
Erlang
29
GitHub Actions
16
Go
1,749
Maven
4,978
npm
3,509
NuGet
609
pip
3,076
Pub
10
RubyGems
832
Rust
781
Swift
34
Unreviewed advisories
All unreviewed
5,000+

432 advisories

Loading
Winlogon Elevation of Privilege Vulnerability Moderate Unreviewed
CVE-2024-30067 was published Jun 11, 2024
BoringSSLAEADContext in Netty Repeats Nonces Moderate
CVE-2024-36121 was published for io.netty.incubator:netty-incubator-codec-ohttp (Maven) Jun 5, 2024
SalusaSecondus
Memory corruption when more scan frequency list or channels are sent from the user space. Moderate Unreviewed
CVE-2023-43545 was published Jun 3, 2024
Windows Mobile Broadband Driver Remote Code Execution Vulnerability Moderate Unreviewed
CVE-2024-30021 was published May 14, 2024
Windows Mobile Broadband Driver Remote Code Execution Vulnerability Moderate Unreviewed
CVE-2024-29997 was published May 14, 2024
Windows Mobile Broadband Driver Remote Code Execution Vulnerability Moderate Unreviewed
CVE-2024-30000 was published May 14, 2024
Windows Mobile Broadband Driver Remote Code Execution Vulnerability Moderate Unreviewed
CVE-2024-30003 was published May 14, 2024
Windows Mobile Broadband Driver Remote Code Execution Vulnerability Moderate Unreviewed
CVE-2024-29999 was published May 14, 2024
Windows Mobile Broadband Driver Remote Code Execution Vulnerability Moderate Unreviewed
CVE-2024-30005 was published May 14, 2024
Windows Mobile Broadband Driver Remote Code Execution Vulnerability Moderate Unreviewed
CVE-2024-30004 was published May 14, 2024
Windows Mobile Broadband Driver Remote Code Execution Vulnerability Moderate Unreviewed
CVE-2024-30001 was published May 14, 2024
Windows Mobile Broadband Driver Remote Code Execution Vulnerability Moderate Unreviewed
CVE-2024-30012 was published May 14, 2024
Memory corruption in HLOS while checking for the storage type. Moderate Unreviewed
CVE-2023-43530 was published May 6, 2024
An integer overflow or wraparound vulnerability has been reported to affect several QNAP... Moderate Unreviewed
CVE-2024-21905 was published Apr 26, 2024
Secure Boot Security Feature Bypass Vulnerability Moderate Unreviewed
CVE-2024-28923 was published Apr 9, 2024
Secure Boot Security Feature Bypass Vulnerability Moderate Unreviewed
CVE-2024-26171 was published Apr 9, 2024
libdav1d-sys affected by dav1d AV1 decoder integer overflow Moderate
GHSA-mc39-h54g-pvw6 was published for libdav1d-sys (Rust) Apr 5, 2024
pgproto3 SQL Injection via Protocol Message Size Overflow Moderate
GHSA-7jwh-3vrq-q3m8 was published for github.com/jackc/pgproto3 (Go) Mar 4, 2024
paul-gerste-sonarsource
pgx SQL Injection via Protocol Message Size Overflow Moderate
CVE-2024-27304 was published for github.com/jackc/pgproto3 (Go) Mar 4, 2024
paul-gerste-sonarsource
In the Linux kernel, the following vulnerability has been resolved: tools/power turbostat: Fix... Moderate Unreviewed
CVE-2021-46940 was published Feb 27, 2024
An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame... Moderate Unreviewed
CVE-2024-1580 was published Feb 19, 2024
A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min... Moderate Unreviewed
CVE-2024-24857 was published Feb 5, 2024
In ged, there is a possible out of bounds write due to an integer overflow. This could lead to... Moderate Unreviewed
CVE-2024-20016 was published Feb 5, 2024
An integer overflow was found in the __vsyslog_internal function of the glibc library. This... Moderate Unreviewed
CVE-2023-6780 was published Jan 31, 2024
A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition... Moderate Unreviewed
CVE-2023-40548 was published Jan 29, 2024
ProTip! Advisories are also available from the GraphQL API