Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,638
Maven
5,000+
npm
4,264
NuGet
760
pip
4,060
Pub
12
RubyGems
956
Rust
1,056
Swift
45
Unreviewed advisories
All unreviewed
5,000+

549 advisories

Loading
A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an... High Unreviewed
CVE-2018-5737 was published May 13, 2022
** DISPUTED ** The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in... High Unreviewed
CVE-2018-7713 was published May 13, 2022
** DISPUTED ** The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in... High Unreviewed
CVE-2018-7714 was published May 13, 2022
** DISPUTED ** The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in... High Unreviewed
CVE-2018-7712 was published May 13, 2022
An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in... High Unreviewed
CVE-2019-7662 was published May 13, 2022
The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote... High Unreviewed
CVE-2017-11692 was published May 13, 2022
There is a reachable assertion abort in the function write_long_string_missing_values() in data... Moderate Unreviewed
CVE-2019-9211 was published May 13, 2022
An issue was discovered in Bento4 v1.5.1-627. There is an assertion failure in AP4_AtomListWriter... Moderate Unreviewed
CVE-2019-7697 was published May 13, 2022
Google Chrome before 6.0.472.59 on Linux does not properly handle cursors, which might allow... Moderate Unreviewed
CVE-2010-3411 was published May 13, 2022
An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify... Moderate Unreviewed
CVE-2017-18252 was published May 13, 2022
A reachable assertion vulnerability in Trend Micro Apex One could allow an attacker to crash the... Moderate Unreviewed
CVE-2021-44022 was published Dec 4, 2021
Reachable Assertion in OpenCV. Moderate
CVE-2018-5269 was published for opencv-contrib-python (pip) Oct 12, 2021
An issue was discovered in JasPer 2.0.14. There is an access violation in the function... Moderate Unreviewed
CVE-2018-19539 was published May 13, 2022
In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the... Moderate Unreviewed
CVE-2017-13658 was published May 13, 2022
JasPer 2.0.14 allows denial of service via a reachable assertion in the function... Moderate Unreviewed
CVE-2018-9252 was published May 13, 2022
When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP... Moderate Unreviewed
CVE-2019-0003 was published May 13, 2022
A query with a specific set of characteristics could cause a server using DNS64 to encounter an... Moderate Unreviewed
CVE-2017-3136 was published May 13, 2022
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This... High Unreviewed
CVE-2019-10894 was published May 13, 2022
`CHECK_EQ` fail in `tf.raw_ops.TensorListResize` Moderate
CVE-2022-41893 was published for tensorflow (pip) Nov 21, 2022
An issue was discovered in cairo 1.16.0. There is an assertion problem in the function... Moderate Unreviewed
CVE-2019-6461 was published May 13, 2022
A denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker... High Unreviewed
CVE-2017-3139 was published May 13, 2022
There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound... Moderate Unreviewed
CVE-2017-15371 was published May 13, 2022
An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting... High Unreviewed
CVE-2018-17205 was published May 13, 2022
An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting... Moderate Unreviewed
CVE-2018-17204 was published May 13, 2022
A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17.... Moderate Unreviewed
CVE-2018-20217 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database