Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

1,196 advisories

Loading
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open... Moderate Unreviewed
CVE-2021-32552 was published May 24, 2022
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open... Moderate Unreviewed
CVE-2021-32554 was published May 24, 2022
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open... Moderate Unreviewed
CVE-2021-32555 was published May 24, 2022
It was discovered that the process_report() function in data/whoopsie-upload-all allowed... High Unreviewed
CVE-2021-32557 was published May 24, 2022
A UNIX Symbolic Link (Symlink) Following vulnerability in python-HyperKitty of openSUSE Leap 15.2... High Unreviewed
CVE-2021-25322 was published May 24, 2022
a UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2,... High Unreviewed
CVE-2021-31997 was published May 24, 2022
Improper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may allow... High Unreviewed
CVE-2021-0094 was published May 24, 2022
Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical... High Unreviewed
CVE-2020-15076 was published May 24, 2022
A Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file... High Unreviewed
CVE-2020-27833 was published May 24, 2022
By exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security... High Unreviewed
CVE-2021-23892 was published May 24, 2022
Privilege Escalation vulnerability in the File Lock component of McAfee Total Protection (MTP)... High Unreviewed
CVE-2021-23872 was published May 24, 2022
Windows WalletService Elevation of Privilege Vulnerability High Unreviewed
CVE-2021-31187 was published May 24, 2022
Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root... High Unreviewed
CVE-2020-28007 was published May 24, 2022
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability This CVE ID is... High Unreviewed
CVE-2021-28321 was published May 24, 2022
VestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to files for... High Unreviewed
CVE-2021-30463 was published May 24, 2022
OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it... High Unreviewed
CVE-2020-15075 was published May 24, 2022
This vulnerability allows local attackers to delete arbitrary directories on affected... Moderate Unreviewed
CVE-2021-27241 was published May 24, 2022
There is an open race window when writing output in the following utilities in GNU binutils... Moderate Unreviewed
CVE-2021-20197 was published May 24, 2022
Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) for Windows prior to 11.6... High Unreviewed
CVE-2020-7346 was published May 24, 2022
autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and... Moderate Unreviewed
CVE-2021-28650 was published May 24, 2022
An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with... Moderate Unreviewed
CVE-2021-28153 was published May 24, 2022
Microsoft Windows Folder Redirection Elevation of Privilege Vulnerability High Unreviewed
CVE-2021-26887 was published May 24, 2022
Windows Update Stack Elevation of Privilege Vulnerability High Unreviewed
CVE-2021-26889 was published May 24, 2022
Windows Update Service Elevation of Privilege Vulnerability High Unreviewed
CVE-2021-26866 was published May 24, 2022
Windows User Profile Service Elevation of Privilege Vulnerability High Unreviewed
CVE-2021-26873 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database