GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,046
Erlang
29
GitHub Actions
18
Go
1,871
Maven
5,000+
npm
3,596
NuGet
638
pip
3,182
Pub
10
RubyGems
852
Rust
809
Swift
35
Unreviewed advisories
All unreviewed
5,000+
96,463 advisories
Filter by severity
The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6...
High
Unreviewed
CVE-2024-4032
was published
Jun 17, 2024
In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an...
High
Unreviewed
CVE-2024-6672
was published
Aug 30, 2024
A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 ...
High
Unreviewed
CVE-2022-23829
was published
Jun 18, 2024
Web application manifests were stored by using an insecure MD5 hash which allowed for a hash...
High
Unreviewed
CVE-2024-4765
was published
May 14, 2024
During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the...
High
Unreviewed
CVE-2023-5553
was published
Nov 21, 2023
github.com/containers/image allows unexpected authenticated registry accesses
High
CVE-2024-3727
was published
for
github.com/containers/image
(Go)
May 14, 2024
Null pointer dereference in TFLite MLIR optimizations
High
CVE-2021-37689
was published
for
tensorflow
(pip)
Aug 25, 2021
Null pointer dereference in TFLite
High
CVE-2021-37688
was published
for
tensorflow
(pip)
Aug 25, 2021
Integer overflow in TFLite memory allocation
High
CVE-2021-29605
was published
for
tensorflow
(pip)
May 21, 2021
When almost out-of-memory an elliptic curve key which was never allocated could have been freed...
High
Unreviewed
CVE-2024-6609
was published
Jul 9, 2024
Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to...
High
Unreviewed
CVE-2024-8194
was published
Aug 29, 2024
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker...
High
Unreviewed
CVE-2024-8193
was published
Aug 29, 2024
xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data,...
High
Unreviewed
CVE-2024-43700
was published
Aug 29, 2024
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker...
High
Unreviewed
CVE-2024-8198
was published
Aug 29, 2024
A reflected cross-site scripting (XSS) vulnerability in the parent parameter in the index page of...
High
Unreviewed
CVE-2024-44778
was published
Aug 29, 2024
A reflected cross-site scripting (XSS) vulnerability in the viewname parameter in the index page...
High
Unreviewed
CVE-2024-44779
was published
Aug 29, 2024
A reflected cross-site scripting (XSS) vulnerability in the tag parameter in the index page of...
High
Unreviewed
CVE-2024-44777
was published
Aug 29, 2024
Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to...
High
Unreviewed
CVE-2024-5865
was published
Jul 2, 2024
An issue in TeraByte Unlimited Image for Windows v.3.64.0.0 and before and fixed in v.4.0.0.0...
High
Unreviewed
CVE-2024-31757
was published
May 21, 2024
greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj...
High
Unreviewed
CVE-2024-28425
was published
Mar 14, 2024
Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module...
High
Unreviewed
CVE-2023-52716
was published
Apr 7, 2024
The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an...
High
Unreviewed
CVE-2023-52424
was published
May 17, 2024
ChurchCRM 5.5.0 FRBidSheets.php is vulnerable to Blind SQL Injection (Time-based) via the...
High
Unreviewed
CVE-2024-25891
was published
Feb 21, 2024
ProTip!
Advisories are also available from the
GraphQL API