Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
21
Go
2,003
Maven
5,000+
npm
3,714
NuGet
661
pip
3,387
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

43 advisories

Loading
Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a... High Unreviewed
CVE-2024-45419 was published Nov 19, 2024
In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: Fix... High Unreviewed
CVE-2024-39492 was published Jul 10, 2024
An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges... High Unreviewed
CVE-2023-47480 was published Sep 20, 2024
Denial of Service (DoS) vulnerability has been found in Dual-redundant Platform for Computer. If... High Unreviewed
CVE-2024-8110 was published Sep 17, 2024
An Unchecked Return Value vulnerability in the Routing Protocol Daemon (rpd) on Juniper Networks... High Unreviewed
CVE-2024-39558 was published Jul 11, 2024
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products,... High Unreviewed
CVE-2020-7247 was published May 24, 2022
In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in... High Unreviewed
CVE-2024-38427 was published Jun 16, 2024
Unchecked return value in SDM firmware for Intel(R) Stratix 10 and Intel(R) Agilex 7 FPGAs before... High Unreviewed
CVE-2023-41092 was published May 16, 2024
An Unchecked Return Value vulnerability in the user interfaces to the Juniper Networks Junos OS... High Unreviewed
CVE-2023-44182 was published Oct 13, 2023
B&R APROL versions < R 4.2-07 doesn’t process correctly specially formatted data packages sent to... High Unreviewed
CVE-2022-43765 was published Jul 6, 2023
The return value from `gfx::SourceSurfaceSkia::Map()` wasn't being verified which could have... High Unreviewed
CVE-2023-25733 was published Jun 19, 2023
An unchecked return value in TLS handshake code could have caused a potentially exploitable crash... High Unreviewed
CVE-2024-0743 was published Jan 23, 2024
GNU inetutils through 2.4 may allow privilege escalation because of unchecked return values of... High Unreviewed
CVE-2023-40303 was published Aug 14, 2023
An Unchecked Return Value to NULL Pointer Dereference vulnerability in Packet Forwarding Engine ... High Unreviewed
CVE-2022-22231 was published Oct 18, 2022
HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0... High Unreviewed
CVE-2021-32845 was published Feb 18, 2023
In the Linux kernel before 5.16, tools/perf/util/expr.c lacks a check for the hashmap__new return... High Unreviewed
CVE-2023-23003 was published Mar 1, 2023
FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in... High Unreviewed
CVE-2019-15942 was published May 24, 2022
Insufficient check of preconditions could lead to Denial of Service conditions when calling... High Unreviewed
CVE-2022-43763 was published Feb 8, 2023
A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value,... High Unreviewed
CVE-2021-3998 was published Aug 25, 2022
An issue has been found in PBC through 2022-8-27. A SEGV issue detected in the function... High Unreviewed
CVE-2022-38936 was published Sep 25, 2022
dmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the... High Unreviewed
CVE-2017-6964 was published May 13, 2022
A denial of service vulnerability in the Android media framework (libstagefright). Product:... High Unreviewed
CVE-2017-0774 was published May 13, 2022
A remote code execution vulnerability in the Android media framework (libhevc). Product: Android.... High Unreviewed
CVE-2017-0720 was published May 13, 2022
A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to... High Unreviewed
CVE-2017-0599 was published May 13, 2022
In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was... High Unreviewed
CVE-2018-14367 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database