Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

2,321 advisories

Loading
An issue has been found in function vfprintf in PDF2JSON 0.70 that allows attackers to cause a... Moderate Unreviewed
CVE-2020-19463 was published May 24, 2022
An issue has been found in function XRef::fetch in PDF2JSON 0.70 that allows attackers to cause a... Moderate Unreviewed
CVE-2020-19464 was published May 24, 2022
An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to... Moderate Unreviewed
CVE-2020-19469 was published May 24, 2022
An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows... Moderate Unreviewed
CVE-2020-19475 was published May 24, 2022
QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in... Moderate Unreviewed
CVE-2021-36978 was published May 24, 2022
matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in... Moderate Unreviewed
CVE-2021-36977 was published May 24, 2022
Unicorn Engine 1.0.2 has an out-of-bounds write in helper_wfe_arm. Moderate Unreviewed
CVE-2020-36431 was published May 24, 2022
Variant_encodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion... Moderate Unreviewed
CVE-2020-36429 was published May 24, 2022
Unicorn Engine 1.0.2 has an out-of-bounds write in tb_flush_armeb (called from cpu_arm_exec_armeb... Moderate Unreviewed
CVE-2021-36979 was published May 24, 2022
A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_subsequent_scan()... Moderate Unreviewed
CVE-2020-23706 was published May 24, 2022
A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_progressive() at... Moderate Unreviewed
CVE-2020-23707 was published May 24, 2022
A heap buffer overflow vulnerability in Ap4TrunAtom.cpp of Bento 1.5.1-628 may lead to an out-of... Moderate Unreviewed
CVE-2020-19721 was published May 24, 2022
SAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,... Moderate Unreviewed
CVE-2021-33684 was published May 24, 2022
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received... Moderate Unreviewed
CVE-2021-33681 was published May 24, 2022
Mikrotik RouterOs through stable version 6.48.3 suffers from a memory corruption vulnerability in... Moderate Unreviewed
CVE-2020-20231 was published May 24, 2022
In encodeFrames of avc_enc_fuzzer.cpp, there is a possible out of bounds write due to a double... Moderate Unreviewed
CVE-2021-0601 was published May 24, 2022
Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the ... Moderate Unreviewed
CVE-2020-20215 was published May 24, 2022
OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an... Moderate Unreviewed
CVE-2021-33889 was published May 24, 2022
KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat:... Moderate Unreviewed
CVE-2021-36083 was published May 24, 2022
Trusty trusted Linux kernel (TLK) contains a vulnerability in the NVIDIA TLK kernel where a lack... Moderate Unreviewed
CVE-2021-34373 was published May 24, 2022
Trusty contains a vulnerability in all trusted applications (TAs) where the stack cookie was not... Moderate Unreviewed
CVE-2021-34375 was published May 24, 2022
Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow might lead to... Moderate Unreviewed
CVE-2021-34383 was published May 24, 2022
An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in... Moderate Unreviewed
CVE-2021-3630 was published May 24, 2022
IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap based buffer overflow... Moderate Unreviewed
CVE-2021-20494 was published May 24, 2022
IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap-based buffer overflow... Moderate Unreviewed
CVE-2021-20573 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database