GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
2,000
Maven
5,000+
npm
3,711
NuGet
661
pip
3,383
Pub
11
RubyGems
885
Rust
849
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
15 advisories
Filter by severity
When the NGINX Plus is configured to use the MQTT pre-read module, undisclosed requests can cause...
High
Unreviewed
CVE-2024-39792
was published
Aug 14, 2024
By using XSL Transforms, a malicious webserver could have served a user an XSL document that...
High
Unreviewed
CVE-2022-22755
was published
Dec 22, 2022
An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended...
High
Unreviewed
CVE-2022-30256
was published
Nov 19, 2022
A flaw was found in OpenStack. The application credential tokens can be used even after they have...
High
Unreviewed
CVE-2022-2447
was published
Sep 2, 2022
When Responsive Design Mode was enabled, it used references to objects that were previously freed...
High
Unreviewed
CVE-2021-23995
was published
May 24, 2022
A denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack...
High
Unreviewed
CVE-2020-13530
was published
May 24, 2022
get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege...
High
Unreviewed
CVE-2020-25221
was published
May 24, 2022
TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to...
High
Unreviewed
CVE-2019-15691
was published
May 24, 2022
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...
High
Unreviewed
CVE-2017-14895
was published
May 13, 2022
An elevation of privilege vulnerability in CameraBase could enable a local malicious application...
High
Unreviewed
CVE-2017-0544
was published
May 13, 2022
An Operation on a Resource after Expiration or Release vulnerability in the Routing Protocol...
High
Unreviewed
CVE-2022-22197
was published
Apr 15, 2022
Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its...
High
Unreviewed
CVE-2021-33020
was published
Apr 3, 2022
IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user...
High
Unreviewed
CVE-2022-22332
was published
Apr 2, 2022
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),...
High
Unreviewed
CVE-2021-37185
was published
Feb 10, 2022
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),...
High
Unreviewed
CVE-2021-37204
was published
Feb 10, 2022
ProTip!
Advisories are also available from the
GraphQL API