GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,279
Erlang
31
GitHub Actions
21
Go
2,056
Maven
5,000+
npm
3,740
NuGet
668
pip
3,421
Pub
12
RubyGems
891
Rust
873
Swift
36
Unreviewed advisories
All unreviewed
5,000+
30 advisories
Filter by severity
Eclipse Vert.x memory leak
Moderate
CVE-2024-1023
was published
for
io.vertx:vertx-core
(Maven)
Mar 27, 2024
Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow
Moderate
CVE-2023-27506
was published
for
intel-tensorflow
(pip)
Aug 11, 2023
MindSpore vulnerable to memory corruption
Moderate
CVE-2023-2970
was published
for
mindspore
(pip)
May 30, 2023
Wasmtime out of bounds read/write with zero-memory-pages configuration
Moderate
CVE-2022-39392
was published
for
wasmtime
(Rust)
Nov 10, 2022
PartialBufferOutputStream2 flush issues
Moderate
CVE-2008-7227
was published
for
org.geoserver.web:gs-web-app
(Maven)
May 17, 2022
•
withdrawn
Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson
Moderate
CVE-2010-1666
was published
for
python-cjson
(pip)
May 17, 2022
Lift Sensitive Information Disclosure
Moderate
CVE-2013-3300
was published
for
net.liftweb:lift-webkit
(Maven)
May 17, 2022
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack
Moderate
CVE-2013-4179
was published
for
nova
(pip)
May 17, 2022
OpenStack Swift allows authenticated users to cause a denial of service
Moderate
CVE-2013-4155
was published
for
swift
(pip)
May 17, 2022
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Sling
Moderate
CVE-2013-2254
was published
for
org.apache.sling:org.apache.sling.api
(Maven)
May 17, 2022
Apache Tomcat does not properly handle an invalid Transfer-Encoding header
Moderate
CVE-2010-2227
was published
for
org.apache.tomcat:tomcat
(Maven)
May 14, 2022
OpenStack Keystone Denial of Service vulnerability via a large HTTP request
Moderate
CVE-2013-0270
was published
for
keystone
(pip)
May 5, 2022
Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
Moderate
CVE-2017-17760
was published
for
opencv-contrib-python
(pip)
Oct 12, 2021
Float cast overflow undefined behavior
Moderate
CVE-2020-15266
was published
for
tensorflow
(pip)
Nov 13, 2020
Heap buffer overflow in CefSharp
Moderate
CVE-2020-15999
was published
for
CefSharp.Common
(NuGet)
Oct 27, 2020
Denial of service in tensorflow-lite
Moderate
CVE-2020-15213
was published
for
tensorflow
(pip)
Sep 25, 2020
Segfault and data corruption in tensorflow-lite
Moderate
CVE-2020-15207
was published
for
tensorflow
(pip)
Sep 25, 2020
Heap buffer overflow in Tensorflow
Moderate
CVE-2020-15195
was published
for
tensorflow
(pip)
Sep 25, 2020
Heap buffer overflow in Tensorflow
Moderate
CVE-2020-15198
was published
for
tensorflow
(pip)
Sep 25, 2020
Heap buffer overflow in Tensorflow
Moderate
CVE-2020-15196
was published
for
tensorflow
(pip)
Sep 25, 2020
Denial of service in Netty
Moderate
CVE-2014-3488
was published
for
io.netty:netty-handler
(Maven)
Jun 30, 2020
ProTip!
Advisories are also available from the
GraphQL API