Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,985
Maven
5,000+
npm
3,701
NuGet
657
pip
3,326
Pub
11
RubyGems
882
Rust
836
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

177 advisories

Loading
A vulnerability was found in Linux Kernel. It has been declared as problematic. This... Moderate Unreviewed
CVE-2022-3532 was published Oct 17, 2022
A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects... Moderate Unreviewed
CVE-2022-3531 was published Oct 17, 2022
A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects... Moderate Unreviewed
CVE-2022-3533 was published Oct 17, 2022
P2M pool freeing may take excessively long The P2M pool backing second level address translation... Moderate Unreviewed
CVE-2022-33746 was published Oct 11, 2022
A vulnerability was found in Open5GS up to 2.4.10. It has been declared as problematic. Affected... Moderate Unreviewed
CVE-2022-3299 was published Sep 27, 2022
D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows... Moderate Unreviewed
CVE-2022-35191 was published Aug 24, 2022
A vulnerability classified as problematic has been found in SourceCodester Gym Management System.... Moderate Unreviewed
CVE-2022-2776 was published Aug 12, 2022
In BIG-IP Versions 17.0.x before 17.0.0.1 and 16.1.x before 16.1.3.1, when source-port preserve... Moderate Unreviewed
CVE-2022-35272 was published Aug 5, 2022
PingID Windows Login prior to 2.8 is vulnerable to a denial of service condition on local... Moderate Unreviewed
CVE-2022-23717 was published Jul 1, 2022
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain... Moderate Unreviewed
CVE-2022-28875 was published May 26, 2022
MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin... Moderate Unreviewed
CVE-2022-31624 was published May 26, 2022
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress... Moderate Unreviewed
CVE-2022-31622 was published May 26, 2022
A vulnerability affecting F-Secure antivirus engine was discovered whereby unpacking UPX file can... Moderate Unreviewed
CVE-2021-40833 was published May 24, 2022
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the... Moderate Unreviewed
CVE-2021-1093 was published May 24, 2022
In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may... Moderate Unreviewed
CVE-2021-21003 was published May 24, 2022
Firefox for Android would become unstable and hard-to-recover when a website opened too many... Moderate Unreviewed
CVE-2021-29962 was published May 24, 2022
An issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in... Moderate Unreviewed
CVE-2020-21839 was published May 24, 2022
NVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, contains a... Moderate Unreviewed
CVE-2021-1077 was published May 24, 2022
An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x,... Moderate Unreviewed
CVE-2021-26906 was published May 24, 2022
An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119... Moderate Unreviewed
CVE-2020-27283 was published May 24, 2022
A potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x (>=13... Moderate Unreviewed
CVE-2020-26411 was published May 24, 2022
A res_pjsip_session crash was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before... Moderate Unreviewed
CVE-2020-28327 was published May 24, 2022
A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat... Moderate Unreviewed
CVE-2020-14307 was published May 24, 2022
Unless a nameserver is providing authoritative service for one or more zones and at least one... Moderate Unreviewed
CVE-2020-8619 was published May 24, 2022
Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may,... Moderate Unreviewed
CVE-2019-19886 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database