Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

5,051 advisories

Loading
In Settings, there is a possible way to display an incorrect app name due to improper input... High Unreviewed
CVE-2021-39764 was published Mar 31, 2022
Improper Input Validation in GoGo Protobuf High
CVE-2021-3121 was published for github.com/gogo/protobuf (Go) Mar 28, 2022
Unrestricted Upload of File with Dangerous Type in Gogs High
CVE-2022-0415 was published for gogs.io/gogs (Go) Mar 28, 2022
wuhan005
Credited to wuhan005
The lack of validation of a key-value field in the Splunk-to-Splunk protocol results in a denial... High Unreviewed
CVE-2021-3422 was published Mar 26, 2022
SolarWinds received a report of a vulnerability related to an input that was not sanitized in... High Unreviewed
CVE-2021-35254 was published Mar 26, 2022
A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this... High Unreviewed
CVE-2021-3567 was published Mar 26, 2022
This vulnerability can be exploited by parsing maliciously crafted project files with Horner... High Unreviewed
CVE-2021-44462 was published Mar 26, 2022
Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and... High Unreviewed
CVE-2022-0551 was published Mar 25, 2022
Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian,... High Unreviewed
CVE-2022-0550 was published Mar 25, 2022
Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows... High Unreviewed
CVE-2021-44040 was published Mar 24, 2022
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and... High Unreviewed
CVE-2022-22653 was published Mar 19, 2022
NaN/INF in serverbound movement packets can crash clients and servers High
GHSA-fm35-jgg3-3grx was published for pocketmine/pocketmine-mp (Composer) Mar 18, 2022
Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC... High Unreviewed
CVE-2020-25721 was published Mar 17, 2022
In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep... High Unreviewed
CVE-2021-39701 was published Mar 17, 2022
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious... High Unreviewed
CVE-2022-24415 was published Mar 12, 2022
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious... High Unreviewed
CVE-2022-24416 was published Mar 12, 2022
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious... High Unreviewed
CVE-2022-24419 was published Mar 12, 2022
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious... High Unreviewed
CVE-2022-24421 was published Mar 12, 2022
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious... High Unreviewed
CVE-2022-24420 was published Mar 12, 2022
A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very... High Unreviewed
CVE-2021-23192 was published Mar 4, 2022
A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software... High Unreviewed
CVE-2022-20624 was published Feb 24, 2022
snapd 2.54.2 fails to perform sufficient validation of snap content interface and layout paths,... High Unreviewed
CVE-2021-4120 was published Feb 19, 2022
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker... High Unreviewed
CVE-2020-25717 was published Feb 19, 2022
Improper input validation in Drupal core High
CVE-2022-25271 was published for drupal/core (Composer) Feb 18, 2022
A vulnerability in the checkpoint manager implementation of Cisco Redundancy Configuration... High Unreviewed
CVE-2022-20750 was published Feb 18, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database