Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,205
Erlang
31
GitHub Actions
19
Go
1,988
Maven
5,000+
npm
3,704
NuGet
661
pip
3,332
Pub
11
RubyGems
884
Rust
845
Swift
36
Unreviewed advisories
All unreviewed
5,000+

108 advisories

Loading
A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum()... Moderate Unreviewed
CVE-2023-1906 was published Apr 13, 2023
A vulnerability was found in ermig1979 Simd up to 6.0.134. It has been declared as critical. This... Moderate Unreviewed
CVE-2024-3207 was published Apr 3, 2024
A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic... Moderate Unreviewed
CVE-2024-3024 was published Mar 28, 2024
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue... Moderate Unreviewed
CVE-2023-7104 was published Dec 29, 2023
A flaw was found in Indent. This issue may allow a local user to use a specially-crafted file to... Moderate Unreviewed
CVE-2024-0911 was published Feb 6, 2024
A heap-based buffer overflow issue was discovered in libjpeg-turbo in... Moderate Unreviewed
CVE-2023-2804 was published May 26, 2023
A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data... Moderate Unreviewed
CVE-2024-0684 was published Feb 6, 2024
A Heap-based Buffer Overflow vulnerability in the Network Services Daemon (NSD) of Juniper... Moderate Unreviewed
CVE-2024-21594 was published Jan 12, 2024
A Heap-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) of Juniper... Moderate Unreviewed
CVE-2024-21596 was published Jan 12, 2024
NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a heap-based buffer... Moderate Unreviewed
CVE-2023-31031 was published Jan 12, 2024
JLine vulnerable to out of memory error Moderate
CVE-2023-50572 was published for org.jline:jline-parent (Maven) Dec 29, 2023
When reading DesFire keys, the function that reads the card isn't properly checking the... Moderate Unreviewed
CVE-2023-33221 was published Dec 15, 2023
IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused... Moderate Unreviewed
CVE-2023-28527 was published Dec 9, 2023
IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow,... Moderate Unreviewed
CVE-2023-28526 was published Dec 9, 2023
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. Moderate Unreviewed
CVE-2023-5344 was published Oct 2, 2023
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. Moderate Unreviewed
CVE-2023-5686 was published Oct 20, 2023
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2. Moderate Unreviewed
CVE-2023-3291 was published Jun 16, 2023
A vulnerability, which was classified as critical, was found in PoDoFo 0.10.0. Affected is the... Moderate Unreviewed
CVE-2023-2241 was published Apr 22, 2023
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV. Moderate Unreviewed
CVE-2023-4682 was published Aug 31, 2023
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability... Moderate Unreviewed
CVE-2021-36056 was published May 24, 2022
Buffer Overflow in yajl-ruby Moderate
CVE-2022-24795 was published for yajl-ruby (RubyGems) Apr 5, 2022
jhawthorn
Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5... Moderate Unreviewed
CVE-2022-1052 was published Mar 25, 2022
A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA... Moderate Unreviewed
CVE-2023-20081 was published Mar 23, 2023
A vulnerability, which was classified as problematic, has been found in syoyo tinydng. Affected... Moderate Unreviewed
CVE-2023-1570 was published Mar 22, 2023
A vulnerability classified as critical was found in vox2png 1.0. Affected by this vulnerability... Moderate Unreviewed
CVE-2023-1010 was published Feb 24, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database