Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,750
Maven
5,000+
npm
4,353
NuGet
765
pip
4,114
Pub
12
RubyGems
960
Rust
1,069
Swift
45
Unreviewed advisories
All unreviewed
5,000+

305,621 advisories

Loading
Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in... Moderate Unreviewed
CVE-2023-46842 was published May 16, 2024
The issue was addressed with improved checks. This issue is fixed in iTunes 12.13.2 for Windows.... Moderate Unreviewed
CVE-2024-27793 was published May 14, 2024
An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an... High Unreviewed
CVE-2024-34402 was published May 3, 2024
An issue was discovered in includes/CommentFormatter/CommentParser.php in MediaWiki before 1.39.7... High Unreviewed
CVE-2024-34507 was published May 5, 2024
An issue was discovered in WikibaseLexeme in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1... Critical Unreviewed
CVE-2024-34502 was published May 5, 2024
An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an... Moderate Unreviewed
CVE-2024-34403 was published May 3, 2024
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the... Moderate Unreviewed
CVE-2024-27282 was published May 14, 2024
A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c... Critical Unreviewed
CVE-2023-47212 was published May 1, 2024
Use after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to... High Unreviewed
CVE-2024-4060 was published May 1, 2024
Out of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to... Moderate Unreviewed
CVE-2024-4059 was published May 1, 2024
Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to... High Unreviewed
CVE-2024-4058 was published May 1, 2024
Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute... Low Unreviewed
CVE-2023-51796 was published Apr 19, 2024
Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of... Low Unreviewed
CVE-2023-51792 was published Apr 19, 2024
Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute... High Unreviewed
CVE-2023-51798 was published Apr 19, 2024
Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute... High Unreviewed
CVE-2023-49502 was published Apr 19, 2024
Buffer Overflow vulenrability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute... High Unreviewed
CVE-2023-51791 was published Apr 19, 2024
Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute... High Unreviewed
CVE-2023-49501 was published Apr 19, 2024
FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the... High Unreviewed
CVE-2024-31582 was published Apr 17, 2024
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ... Moderate Unreviewed
CVE-2024-21057 was published Apr 17, 2024
FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init... High Unreviewed
CVE-2024-31578 was published Apr 17, 2024
FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability... Critical Unreviewed
CVE-2024-31581 was published Apr 17, 2024
In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP... Moderate Unreviewed
CVE-2024-31948 was published Apr 7, 2024
In FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a... Moderate Unreviewed
CVE-2024-31949 was published Apr 7, 2024
Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to... High Unreviewed
CVE-2023-49528 was published Apr 12, 2024
A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to... Moderate Unreviewed
CVE-2024-28835 was published Mar 21, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database