GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,984
Maven
5,000+
npm
3,701
NuGet
657
pip
3,325
Pub
11
RubyGems
882
Rust
835
Swift
35
Unreviewed advisories
All unreviewed
5,000+
101 advisories
Filter by severity
Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value...
Moderate
Unreviewed
CVE-2009-0265
was published
May 2, 2022
An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On...
Critical
Unreviewed
CVE-2019-15900
was published
May 24, 2022
A vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE...
Low
Unreviewed
CVE-2023-44322
was published
Nov 14, 2023
An unchecked return value vulnerability has been reported to affect several QNAP operating system...
Low
Unreviewed
CVE-2023-50359
was published
Feb 2, 2024
Improper privilege handling in Apache Accumulo
High
CVE-2020-17533
was published
for
org.apache.accumulo:accumulo-master
(Maven)
Feb 9, 2022
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return...
Moderate
Unreviewed
CVE-2002-1372
was published
Apr 30, 2022
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a...
Moderate
Unreviewed
CVE-2010-0211
was published
May 2, 2022
GNU inetutils through 2.4 may allow privilege escalation because of unchecked return values of...
High
Unreviewed
CVE-2023-40303
was published
Aug 14, 2023
adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits...
Critical
Unreviewed
CVE-2021-38171
was published
May 24, 2022
ecrecover can return undefined data if signature does not verify
Moderate
CVE-2023-37902
was published
for
vyper
(pip)
Jul 25, 2023
Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2.
Moderate
Unreviewed
CVE-2023-3013
was published
May 31, 2023
HashiCorp Consul vulnerable to authorization bypass
Moderate
CVE-2022-40716
was published
for
github.com/hashicorp/consul
(Go)
Sep 25, 2022
A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this...
Moderate
Unreviewed
CVE-2022-3807
was published
Nov 2, 2022
An Unchecked Return Value to NULL Pointer Dereference vulnerability in Packet Forwarding Engine ...
High
Unreviewed
CVE-2022-22231
was published
Oct 18, 2022
An Unchecked Return Value to NULL Pointer Dereference vulnerability in Routing Protocol Daemon ...
Moderate
Unreviewed
CVE-2022-22233
was published
Oct 18, 2022
HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0...
High
Unreviewed
CVE-2021-32845
was published
Feb 18, 2023
A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...
Moderate
Unreviewed
CVE-2021-4189
was published
Aug 25, 2022
A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that...
Moderate
Unreviewed
CVE-2021-42780
was published
Apr 19, 2022
Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...
Critical
Unreviewed
CVE-2022-23806
was published
Feb 12, 2022
In the Linux kernel before 5.16, tools/perf/util/expr.c lacks a check for the hashmap__new return...
High
Unreviewed
CVE-2023-23003
was published
Mar 1, 2023
FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in...
High
Unreviewed
CVE-2019-15942
was published
May 24, 2022
Insufficient check of preconditions could lead to Denial of Service conditions when calling...
High
Unreviewed
CVE-2022-43763
was published
Feb 8, 2023
Misconfigured IP address field in ROA leads to OctoRPKI crash
Moderate
CVE-2021-3911
was published
for
github.com/cloudflare/cfrpki
(Go)
Nov 10, 2021
ProTip!
Advisories are also available from the
GraphQL API