Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

1,129 advisories

Loading
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to... Moderate Unreviewed
CVE-2022-35219 was published Aug 3, 2022
The NHI card’s web service component has a heap-based buffer overflow vulnerability due to... Moderate Unreviewed
CVE-2022-35218 was published Aug 3, 2022
The AWV and MiCollab Client Service components in Mitel MiCollab before 9.3 could allow an... Moderate Unreviewed
CVE-2021-32068 was published May 24, 2022
A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6. GitLab Webhook... Moderate Unreviewed
CVE-2021-22246 was published May 24, 2022
A vulnerability in the way Cisco UCS Manager software handles SSH sessions could allow an... Moderate Unreviewed
CVE-2021-1592 was published May 24, 2022
All versions of the afffected TOYOPUC-PC10 Series,TOYOPUC-Plus Series,TOYOPUC-PC3J/PC2J Series,... Moderate Unreviewed
CVE-2021-33011 was published May 24, 2022
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very... Moderate Unreviewed
CVE-2021-29763 was published May 24, 2022
The webinstaller is a Golang web server executable that enables the generation of an Auvesy image... Moderate Unreviewed
CVE-2021-38465 was published May 24, 2022
An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the... Moderate Unreviewed
CVE-2022-41846 was published Oct 1, 2022
Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service. Moderate Unreviewed
CVE-2022-40885 was published Oct 19, 2022
On MX Series platforms with MS-MPC/MS-MIC, an Allocation of Resources Without Limits or... Moderate Unreviewed
CVE-2021-31369 was published May 24, 2022
A component of the HarmonyOS has a Allocation of Resources Without Limits or Throttling... Moderate Unreviewed
CVE-2021-22461 was published May 24, 2022
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager kernel driver, where a... Moderate Unreviewed
CVE-2021-1121 was published May 24, 2022
A potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a... Moderate Unreviewed
CVE-2021-39912 was published May 24, 2022
A regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3... Moderate Unreviewed
CVE-2021-39914 was published May 24, 2022
A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The... Moderate Unreviewed
CVE-2021-39907 was published May 24, 2022
iptables before 1.2.4 does not accurately convert rate limits that are specified on the command... Moderate Unreviewed
CVE-2001-1388 was published Apr 30, 2022
SWFMill commit 53d7690 was discovered to contain a memory allocation issue via operator new[]... Moderate Unreviewed
CVE-2022-36146 was published Aug 17, 2022
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via /bin/png2swf+0x552cea. Moderate Unreviewed
CVE-2022-35105 was published Aug 17, 2022
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via draw_stroke at ... Moderate Unreviewed
CVE-2022-35109 was published Aug 17, 2022
SWFTools commit 772e55a2 was discovered to contain a stack overflow via __sanitizer:... Moderate Unreviewed
CVE-2022-35111 was published Aug 17, 2022
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::reset()... Moderate Unreviewed
CVE-2022-35104 was published Aug 17, 2022
SWFTools commit 772e55a2 was discovered to contain a stack overflow via vfprintf at /stdio-common... Moderate Unreviewed
CVE-2022-35107 was published Aug 17, 2022
Apache Tika vulnerable to uncontrolled memory consumption Moderate
CVE-2022-25169 was published for org.apache.tika:tika (Maven) May 17, 2022
SWFTools commit 772e55a2 was discovered to contain a heap-buffer-overflow via getTransparentColor... Moderate Unreviewed
CVE-2022-35089 was published Sep 22, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database