Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,080
Erlang
29
GitHub Actions
19
Go
1,908
Maven
5,000+
npm
3,642
NuGet
638
pip
3,258
Pub
10
RubyGems
869
Rust
820
Swift
35
Unreviewed advisories
All unreviewed
5,000+

318 advisories

Loading
The issue was addressed with improved checks. This issue is fixed in Safari 16.6.1, macOS Ventura... Critical Unreviewed
CVE-2023-41993 was published Sep 21, 2023
The issue was addressed with improved checks. This issue is fixed in iOS 16.7 and iPadOS 16.7, OS... High Unreviewed
CVE-2023-41992 was published Sep 21, 2023
An improper check for an exceptional condition in the Insider Threat Management (ITM) Server... Moderate Unreviewed
CVE-2023-4828 was published Sep 13, 2023
When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group... High Unreviewed
CVE-2023-4583 was published Sep 11, 2023
Electron context isolation bypass via nested unserializable return value Moderate
CVE-2023-29198 was published for electron (npm) Sep 6, 2023
MarshallOfSound nornagon
In OpenBGPD before 8.1, incorrect handling of BGP update data (length of path attributes) set by... Moderate Unreviewed
CVE-2023-38283 was published Aug 29, 2023
json2xml Uncaught Exception vulnerability High
CVE-2022-25024 was published for json2xml (pip) Aug 23, 2023
In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged... Moderate Unreviewed
CVE-2023-21230 was published Aug 15, 2023
Feathers socket handler allows abusing implicit toString High
CVE-2023-37899 was published for @feathersjs/socketio (npm) Jul 20, 2023
CodeanIO
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding... High Unreviewed
CVE-2023-36835 was published Jul 14, 2023
In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification... Low Unreviewed
CVE-2023-21246 was published Jul 13, 2023
In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases Low Unreviewed
CVE-2023-38069 was published Jul 12, 2023
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could... Critical Unreviewed
CVE-2022-45788 was published Jul 6, 2023
Shopware improper mail validation vulnerability Moderate
CVE-2023-34099 was published for shopware/shopware (Composer) Jun 28, 2023
VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes... High Unreviewed
CVE-2023-35849 was published Jun 19, 2023
A lack of exception handling in the Volkswagen Discover Media Infotainment System Software... Moderate Unreviewed
CVE-2023-34733 was published Jun 16, 2023
In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to local... Moderate Unreviewed
CVE-2023-21137 was published Jun 15, 2023
ink! vulnerable to incorrect decoding of storage value when using `DelegateCall` Moderate
CVE-2023-34449 was published for ink (Rust) Jun 14, 2023
A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security... Moderate Unreviewed
CVE-2023-23602 was published Jun 2, 2023
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions... Moderate Unreviewed
CVE-2023-32716 was published Jun 1, 2023
Insufficient validation when decoding a Socket.IO packet High
CVE-2023-32695 was published for socket.io-parser (npm) May 23, 2023
rafax00 darrachequesne
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could... High Unreviewed
CVE-2023-25619 was published Apr 19, 2023
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that... Moderate Unreviewed
CVE-2023-25620 was published Apr 19, 2023
An Improper Check for Unusual or Exceptional Conditions vulnerability in the bbe-smgd of Juniper... Moderate Unreviewed
CVE-2023-28974 was published Apr 18, 2023
An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper... Moderate Unreviewed
CVE-2023-28979 was published Apr 18, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database