Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,205
Erlang
31
GitHub Actions
19
Go
1,988
Maven
5,000+
npm
3,704
NuGet
661
pip
3,330
Pub
11
RubyGems
884
Rust
845
Swift
36
Unreviewed advisories
All unreviewed
5,000+

9 advisories

Loading
Undefined Behavior in mlflow Moderate
CVE-2024-3099 was published for mlflow (pip) Jun 6, 2024
A vulnerability in lunary-ai/lunary version 1.2.2 allows attackers to bypass user creation limits... Moderate Unreviewed
CVE-2024-4153 was published May 22, 2024
A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to... High Unreviewed
CVE-2024-20380 was published Apr 18, 2024
Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12 Moderate Unreviewed
CVE-2023-4874 was published Sep 9, 2023
Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2... Moderate Unreviewed
CVE-2023-4875 was published Sep 9, 2023
distribution catalog API endpoint can lead to OOM via malicious user input High
CVE-2023-2253 was published for github.com/docker/distribution (Go) May 11, 2023
josegomezr
Undefined Behavior for Input to API in GitHub repository vim/vim prior to 9.0.0100. Moderate Unreviewed
CVE-2022-2598 was published Aug 2, 2022
Undefined behavior when users supply invalid resource handles Moderate
CVE-2022-29207 was published for tensorflow (pip) May 24, 2022
Incorrect validation of user input in the role name parser may lead to use of uninitialized... High Unreviewed
CVE-2020-7925 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database