Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,967
Erlang
29
GitHub Actions
16
Go
1,749
Maven
4,978
npm
3,509
NuGet
609
pip
3,076
Pub
10
RubyGems
832
Rust
781
Swift
34
Unreviewed advisories
All unreviewed
5,000+

11 advisories

Loading
RSA decryption vulnerable to Bleichenbacher timing vulnerability Moderate
CVE-2020-25659 was published for cryptography (pip) Oct 27, 2020
tomato42
Timing attacks in python-rsa Moderate
CVE-2020-25658 was published for rsa (pip) Apr 30, 2021
It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen... Moderate Unreviewed
CVE-2018-10845 was published May 13, 2022
It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen... Moderate Unreviewed
CVE-2018-10844 was published May 13, 2022
A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM... Moderate Unreviewed
CVE-2018-10846 was published May 13, 2022
A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user... Moderate Unreviewed
CVE-2016-7056 was published May 13, 2022
The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can... Moderate Unreviewed
CVE-2020-14341 was published May 24, 2022
A flaw was found in all released versions of m2crypto, where they are vulnerable to... Moderate Unreviewed
CVE-2020-25657 was published May 24, 2022
Marvin Attack: potential key recovery through timing sidechannels Moderate
GHSA-4grx-2x9w-596c was published for rsa (Rust) Nov 28, 2023
lukas-braune
Marvin Attack: potential key recovery through timing sidechannels Moderate
CVE-2023-49092 was published for rsa (Rust) Nov 28, 2023
tomato42 lukas-braune
Dell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability. A... Moderate Unreviewed
CVE-2024-25964 was published Mar 25, 2024
ProTip! Advisories are also available from the GraphQL API