Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,046
Erlang
29
GitHub Actions
18
Go
1,871
Maven
5,000+
npm
3,596
NuGet
638
pip
3,182
Pub
10
RubyGems
852
Rust
809
Swift
35
Unreviewed advisories
All unreviewed
5,000+

96,463 advisories

The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6... High Unreviewed
CVE-2024-4032 was published Jun 17, 2024
In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an... High Unreviewed
CVE-2024-6672 was published Aug 30, 2024
A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 ... High Unreviewed
CVE-2022-23829 was published Jun 18, 2024
Web application manifests were stored by using an insecure MD5 hash which allowed for a hash... High Unreviewed
CVE-2024-4765 was published May 14, 2024
During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the... High Unreviewed
CVE-2023-5553 was published Nov 21, 2023
github.com/containers/image allows unexpected authenticated registry accesses High
CVE-2024-3727 was published for github.com/containers/image (Go) May 14, 2024
RTann
Null pointer dereference in TFLite MLIR optimizations High
CVE-2021-37689 was published for tensorflow (pip) Aug 25, 2021
KateCatlin
Null pointer dereference in TFLite High
CVE-2021-37688 was published for tensorflow (pip) Aug 25, 2021
NPE in TFLite High
CVE-2021-37681 was published for tensorflow (pip) Aug 25, 2021
Heap OOB read in TFLite High
CVE-2021-29606 was published for tensorflow (pip) May 21, 2021
Integer overflow in TFLite memory allocation High
CVE-2021-29605 was published for tensorflow (pip) May 21, 2021
When almost out-of-memory an elliptic curve key which was never allocated could have been freed... High Unreviewed
CVE-2024-6609 was published Jul 9, 2024
Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to... High Unreviewed
CVE-2024-8194 was published Aug 29, 2024
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker... High Unreviewed
CVE-2024-8193 was published Aug 29, 2024
xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data,... High Unreviewed
CVE-2024-43700 was published Aug 29, 2024
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker... High Unreviewed
CVE-2024-8198 was published Aug 29, 2024
A reflected cross-site scripting (XSS) vulnerability in the parent parameter in the index page of... High Unreviewed
CVE-2024-44778 was published Aug 29, 2024
A reflected cross-site scripting (XSS) vulnerability in the viewname parameter in the index page... High Unreviewed
CVE-2024-44779 was published Aug 29, 2024
A reflected cross-site scripting (XSS) vulnerability in the tag parameter in the index page of... High Unreviewed
CVE-2024-44777 was published Aug 29, 2024
Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to... High Unreviewed
CVE-2024-5865 was published Jul 2, 2024
An issue in TeraByte Unlimited Image for Windows v.3.64.0.0 and before and fixed in v.4.0.0.0... High Unreviewed
CVE-2024-31757 was published May 21, 2024
greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj... High Unreviewed
CVE-2024-28425 was published Mar 14, 2024
Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module... High Unreviewed
CVE-2023-52716 was published Apr 7, 2024
The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an... High Unreviewed
CVE-2023-52424 was published May 17, 2024
ChurchCRM 5.5.0 FRBidSheets.php is vulnerable to Blind SQL Injection (Time-based) via the... High Unreviewed
CVE-2024-25891 was published Feb 21, 2024
ProTip! Advisories are also available from the GraphQL API