GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,638
Maven
5,000+
npm
4,264
NuGet
760
pip
4,060
Pub
12
RubyGems
956
Rust
1,056
Swift
45
Unreviewed advisories
All unreviewed
5,000+
1,315 advisories
Filter by severity
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via draw_stroke at ...
Moderate
Unreviewed
CVE-2022-35109
was published
Aug 17, 2022
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via /bin/png2swf+0x552cea.
Moderate
Unreviewed
CVE-2022-35105
was published
Aug 17, 2022
SWFMill commit 53d7690 was discovered to contain a memory allocation issue via operator new[]...
Moderate
Unreviewed
CVE-2022-36146
was published
Aug 17, 2022
iptables before 1.2.4 does not accurately convert rate limits that are specified on the command...
Moderate
Unreviewed
CVE-2001-1388
was published
Apr 30, 2022
All versions of package freeopcua/freeopcua are vulnerable to Denial of Service (DoS) when...
High
Unreviewed
CVE-2022-24298
was published
Aug 24, 2022
All versions of package asneg/opcuastack are vulnerable to Denial of Service (DoS) due to a...
High
Unreviewed
CVE-2022-24381
was published
Aug 24, 2022
OpenSource Moddable v10.5.0 was discovered to contain a stack overflow via the component ...
High
Unreviewed
CVE-2021-29324
was published
May 24, 2022
A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The...
Moderate
Unreviewed
CVE-2021-39907
was published
May 24, 2022
A regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3...
Moderate
Unreviewed
CVE-2021-39914
was published
May 24, 2022
A potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a...
Moderate
Unreviewed
CVE-2021-39912
was published
May 24, 2022
A memory allocation with excessive size value vulnerability in the license verification function...
High
Unreviewed
CVE-2021-36174
was published
May 24, 2022
There is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this...
High
Unreviewed
CVE-2021-36985
was published
May 24, 2022
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager kernel driver, where a...
Moderate
Unreviewed
CVE-2021-1121
was published
May 24, 2022
A component of the HarmonyOS has a Allocation of Resources Without Limits or Throttling...
Moderate
Unreviewed
CVE-2021-22461
was published
May 24, 2022
On MX Series platforms with MS-MPC/MS-MIC, an Allocation of Resources Without Limits or...
Moderate
Unreviewed
CVE-2021-31369
was published
May 24, 2022
This vulnerability allows local attackers to escalate privileges on affected installations of...
High
Unreviewed
CVE-2021-34854
was published
May 24, 2022
Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service.
Moderate
Unreviewed
CVE-2022-40885
was published
Oct 19, 2022
A Memory Allocation with Excessive Size Value vulnerablity in the TEE_Realloc function in Samsung...
High
Unreviewed
CVE-2022-40762
was published
Sep 17, 2022
An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the...
Moderate
Unreviewed
CVE-2022-41846
was published
Oct 1, 2022
The webinstaller is a Golang web server executable that enables the generation of an Auvesy image...
Moderate
Unreviewed
CVE-2021-38465
was published
May 24, 2022
A vulnerability in the email scanning algorithm of Cisco AsyncOS software for Cisco Email...
High
Unreviewed
CVE-2021-34741
was published
May 24, 2022
The affected product does not properly control the allocation of resources. A user may be able to...
High
Unreviewed
CVE-2021-38463
was published
May 24, 2022
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very...
Moderate
Unreviewed
CVE-2021-29763
was published
May 24, 2022
All versions of the afffected TOYOPUC-PC10 Series,TOYOPUC-Plus Series,TOYOPUC-PC3J/PC2J Series,...
Moderate
Unreviewed
CVE-2021-33011
was published
May 24, 2022
VMware Workspace ONE UEM REST API contains a denial of service vulnerability. A malicious actor...
High
Unreviewed
CVE-2021-22029
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API