Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

2,321 advisories

Loading
Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability... Moderate Unreviewed
CVE-2021-21103 was published May 24, 2022
The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly... Moderate Unreviewed
CVE-2021-28136 was published May 24, 2022
A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two... Moderate Unreviewed
CVE-2021-3634 was published May 24, 2022
Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via... Moderate Unreviewed
CVE-2020-18971 was published May 24, 2022
In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_p_mb_intfi in vc1_block.c... Moderate Unreviewed
CVE-2020-18778 was published May 24, 2022
In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_b_mb_intfi in vc1_block.c... Moderate Unreviewed
CVE-2020-18775 was published May 24, 2022
An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers... Moderate Unreviewed
CVE-2020-18773 was published May 24, 2022
A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers... Moderate Unreviewed
CVE-2020-18898 was published May 24, 2022
In clk driver, there is a possible out of bounds write due to an incorrect bounds check. This... Moderate Unreviewed
CVE-2021-0407 was published May 24, 2022
In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to... Moderate Unreviewed
CVE-2021-0626 was published May 24, 2022
An issue was discovered in Bento4 v1.5.1.0. There is a heap-buffer-overflow in AP4_Dec3Atom:... Moderate Unreviewed
CVE-2020-21066 was published May 24, 2022
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.... Moderate Unreviewed
CVE-2021-38524 was published May 24, 2022
A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c of fig2dev 3.2.7b... Moderate Unreviewed
CVE-2020-21676 was published May 24, 2022
A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows... Moderate Unreviewed
CVE-2020-21675 was published May 24, 2022
A heap-based buffer overflow in the sixel_encoder_output_without_macro function in encoder.c of... Moderate Unreviewed
CVE-2020-21677 was published May 24, 2022
A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b... Moderate Unreviewed
CVE-2020-21680 was published May 24, 2022
IBM Tivoli Workload Scheduler 9.4 and 9.5 is vulnerable to a stack-based buffer overflow, caused... Moderate Unreviewed
CVE-2021-20349 was published May 24, 2022
An issue was discovered in GPAC 1.0.1. There is a heap-based buffer overflow in the function... Moderate Unreviewed
CVE-2021-36584 was published May 24, 2022
A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through APar_readX() in... Moderate Unreviewed
CVE-2021-37231 was published May 24, 2022
An issue was discovered in GPAC v0.8.0, as demonstrated by MP4Box. It contains a heap-based... Moderate Unreviewed
CVE-2020-24829 was published May 24, 2022
A heap-based buffer overflow vulnerability in jp2image.cpp of Exiv2 0.27.3 allows attackers to... Moderate Unreviewed
CVE-2021-31291 was published May 24, 2022
MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not... Moderate Unreviewed
CVE-2021-37220 was published May 24, 2022
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices... Moderate Unreviewed
CVE-2021-35520 was published May 24, 2022
Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function... Moderate Unreviewed
CVE-2020-19609 was published May 24, 2022
Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the ... Moderate Unreviewed
CVE-2020-20219 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database