Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

9,970 advisories

Loading
Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier... High Unreviewed
CVE-2018-19205 was published May 13, 2022
An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x... High Unreviewed
CVE-2017-4966 was published May 13, 2022
The Webhooks component of Atlassian Jira before version 7.6.7 and from version 7.7.0 before... Moderate Unreviewed
CVE-2017-18104 was published May 13, 2022
Atlassian JIRA Software 7.0.3, JIRA Core 7.0.3, and the bundled JIRA Service Desk 3.0.3 installer... Low Unreviewed
CVE-2015-8481 was published May 13, 2022
The ProfileLinkUserFormat component of Jira Server before version 7.6.8, from version 7.7.0... Moderate Unreviewed
CVE-2018-13391 was published May 13, 2022
Cisco NX-OS before 7.0(3)I2(2e) and 7.0(3)I4 before 7.0(3)I4(1) has an incorrect iptables local... High Unreviewed
CVE-2016-1455 was published May 13, 2022
Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for... Moderate Unreviewed
CVE-2017-5075 was published May 13, 2022
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended... Moderate Unreviewed
CVE-2017-16541 was published May 13, 2022
An exploitable information vulnerability exists in the XCF image rendering functionality of... Moderate Unreviewed
CVE-2018-3838 was published May 13, 2022
An exploitable information disclosure vulnerability exists in the PCX image rendering... Moderate Unreviewed
CVE-2018-3837 was published May 13, 2022
An exploitable information disclosure vulnerability exists in the password protection... High Unreviewed
CVE-2018-3854 was published May 13, 2022
An exploitable code execution vulnerability exists in the firmware update functionality of Yi... High Unreviewed
CVE-2018-3928 was published May 13, 2022
An exploitable information disclosure vulnerability exists in the phone-to-camera communications... High Unreviewed
CVE-2018-3947 was published May 13, 2022
An exploitable information disclosure vulnerability exists in the "Secret Chats" functionality of... Moderate Unreviewed
CVE-2018-3986 was published May 13, 2022
Signal Messenger for Android 4.24.8 may expose private information when using "disappearing... Moderate Unreviewed
CVE-2018-3988 was published May 13, 2022
An exploitable local information leak vulnerability exists in the privileged helper tool of GOG... Moderate Unreviewed
CVE-2018-4052 was published May 13, 2022
An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with... Moderate Unreviewed
CVE-2017-12083 was published May 13, 2022
An exploitable file write vulnerability exists in the memory module functionality of Allen... High Unreviewed
CVE-2017-12092 was published May 13, 2022
An exploitable information disclosure vulnerability exists in the Server Agent functionality of... High Unreviewed
CVE-2017-12128 was published May 13, 2022
An exploitable information leak vulnerability exists in Insteon Hub running firmware version 1012... Moderate Unreviewed
CVE-2017-14443 was published May 13, 2022
A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out... High Unreviewed
CVE-2017-14461 was published May 13, 2022
An information disclosure vulnerability exists in the Multi-Camera interface used by the Foscam... High Unreviewed
CVE-2017-2874 was published May 13, 2022
An exploitable information disclosure vulnerability exists in the serviceAgent functionality of... Moderate Unreviewed
CVE-2016-8724 was published May 13, 2022
An exploitable information disclosure vulnerability exists in the Web Application functionality... Moderate Unreviewed
CVE-2016-8725 was published May 13, 2022
An exploitable Information Disclosure vulnerability exists in the Web Application functionality... Moderate Unreviewed
CVE-2016-8722 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database