GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,266
Erlang
31
GitHub Actions
21
Go
2,041
Maven
5,000+
npm
3,734
NuGet
662
pip
3,414
Pub
12
RubyGems
891
Rust
866
Swift
36
Unreviewed advisories
All unreviewed
5,000+
62 advisories
Filter by severity
golang.org/x/net/html NULL Pointer Dereference vulnerability
High
CVE-2018-17142
was published
for
golang.org/x/net
(Go)
May 13, 2022
golang.org/x/net/html NULL Pointer Dereference vulnerability
High
CVE-2018-17075
was published
for
golang.org/x/net
(Go)
May 13, 2022
Nil dereference in NATS JWT, DoS of nats-server
High
CVE-2020-26521
was published
for
github.com/nats-io/jwt
(Go)
Feb 11, 2022
Null pointer dereference in TensorFlow
High
CVE-2022-21739
was published
for
tensorflow
(pip)
Feb 9, 2022
Undefined behavior in `SparseTensorSliceDataset`
High
CVE-2022-21736
was published
for
tensorflow
(pip)
Feb 9, 2022
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat
High
CVE-2020-13934
was published
for
org.apache.tomcat:tomcat
(Maven)
Feb 8, 2022
NULL Pointer Dereference in Protocol Buffers
High
CVE-2021-22570
was published
for
Google.Protobuf
(Composer)
Jan 27, 2022
NULL Pointer Dereference in OpenCV.
High
CVE-2019-14493
was published
for
opencv-contrib-python
(pip)
Oct 12, 2021
Null pointer deference in openssl-src
High
CVE-2020-1967
was published
for
openssl-src
(Rust)
Aug 25, 2021
Null pointer dereference in `CompressElement`
High
CVE-2021-37637
was published
for
tensorflow
(pip)
Aug 25, 2021
Null pointer dereference in `RaggedTensorToTensor`
High
CVE-2021-37638
was published
for
tensorflow
(pip)
Aug 25, 2021
Null pointer dereference and heap OOB read in operations restoring tensors
High
CVE-2021-37639
was published
for
tensorflow
(pip)
Aug 25, 2021
Null pointer dereference in `MatrixDiagPartOp`
High
CVE-2021-37643
was published
for
tensorflow
(pip)
Aug 25, 2021
Null pointer dereference in `SparseTensorSliceDataset`
High
CVE-2021-37647
was published
for
tensorflow
(pip)
Aug 25, 2021
Incorrect validation of `SaveV2` inputs
High
CVE-2021-37648
was published
for
tensorflow
(pip)
Aug 25, 2021
Null pointer dereference in `UncompressElement`
High
CVE-2021-37649
was published
for
tensorflow
(pip)
Aug 25, 2021
ProTip!
Advisories are also available from the
GraphQL API