Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

443 advisories

Loading
Use after free in rio Critical
CVE-2020-35876 was published for rio (Rust) Aug 25, 2021
S3 storage write is not aborted on errors leading to unbounded memory usage High
GHSA-m6m5-pp4g-fcc8 was published for github.com/foxcpp/maddy (Go) Oct 6, 2021
In the Linux kernel before 5.3.4, a reference count usage error in the fib6_rule_suppress()... High Unreviewed
CVE-2019-18198 was published May 24, 2022
drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket buffers... Moderate Unreviewed
CVE-2022-26878 was published Mar 12, 2022
A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 13.1... Moderate Unreviewed
CVE-2022-1100 was published Apr 5, 2022
A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software... High Unreviewed
CVE-2022-20697 was published Apr 16, 2022
Missing Release of Resource after Effective Lifetime in Jenkins High
CVE-2018-1999043 was published for org.jenkins-ci.main:jenkins-core (Maven) May 13, 2022
Buffer Overflow in Apache Mina SSHD High
CVE-2021-30129 was published for org.apache.sshd:sshd-core (Maven) Aug 2, 2021
On Juniper Networks Junos EX series, QFX Series and SRX branch series devices, a memory leak... Moderate Unreviewed
CVE-2021-0215 was published May 24, 2022
A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the... High Unreviewed
CVE-2021-42860 was published May 27, 2022
A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. High Unreviewed
CVE-2021-42859 was published May 27, 2022
An issue was discovered in swftools through 20201222 through a memory leak in the swftools when... High Unreviewed
CVE-2021-42197 was published Jun 3, 2022
rudp v0.6 was discovered to contain a memory leak in the component main.c. High Unreviewed
CVE-2020-20665 was published May 24, 2022
A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of... Critical Unreviewed
CVE-2021-21811 was published May 24, 2022
A vulnerability classified as problematic was found in vicamo NetworkManager. Affected by this... High Unreviewed
CVE-2014-125042 was published Jan 5, 2023
A memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a... High Unreviewed
CVE-2017-11655 was published May 13, 2022
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions <... High Unreviewed
CVE-2022-29884 was published Jul 13, 2022
A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable... Moderate Unreviewed
CVE-2022-22215 was published Jul 21, 2022
QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF:... Moderate Unreviewed
CVE-2022-34503 was published Jul 23, 2022
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6).... Moderate Unreviewed
CVE-2021-33437 was published Jul 27, 2022
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm... Moderate Unreviewed
CVE-2022-28187 was published May 18, 2022
In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device... High Unreviewed
CVE-2019-16995 was published May 24, 2022
libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks... Moderate Unreviewed
CVE-2019-17177 was published May 24, 2022
In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when... Moderate Unreviewed
CVE-2019-16994 was published May 24, 2022
HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in... Moderate Unreviewed
CVE-2019-17178 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API