Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,239
Erlang
31
GitHub Actions
21
Go
2,007
Maven
5,000+
npm
3,716
NuGet
662
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

46 advisories

Loading
Improper Validation of Array Index vulnerability in Apache NimBLE. Lack of input validation for... Moderate Unreviewed
CVE-2024-47249 was published Nov 26, 2024
In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: add missing... Moderate Unreviewed
CVE-2024-50291 was published Nov 19, 2024
In the Linux kernel, the following vulnerability has been resolved: bpf: Check the remaining... Moderate Unreviewed
CVE-2024-50161 was published Nov 7, 2024
Vulnerability of improper memory access in the phone service module Impact: Successful... Moderate Unreviewed
CVE-2024-51517 was published Nov 5, 2024
Memory corruption when the user application modifies the same shared memory asynchronously when... Moderate Unreviewed
CVE-2024-33032 was published Nov 4, 2024
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix array... Moderate Unreviewed
CVE-2022-48979 was published Oct 21, 2024
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Implement... Moderate Unreviewed
CVE-2024-49970 was published Oct 21, 2024
In the Linux kernel, the following vulnerability has been resolved: mm: vmalloc: ensure... Moderate Unreviewed
CVE-2024-46847 was published Sep 27, 2024
EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index,... Moderate Unreviewed
CVE-2024-41564 was published Aug 28, 2024
JustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index,... Moderate Unreviewed
CVE-2024-41565 was published Aug 28, 2024
Roughly Enough Items (REI) v.16.0.729 and before contains an Improper Validation of Specified... Moderate Unreviewed
CVE-2024-42698 was published Aug 28, 2024
In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Assign ->num... Moderate Unreviewed
CVE-2024-39461 was published Jun 25, 2024
Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition... Moderate Unreviewed
CVE-2023-52728 was published Apr 30, 2024
In the Linux kernel, the following vulnerability has been resolved: md: Don't ignore suspended... Moderate Unreviewed
CVE-2024-26758 was published Apr 3, 2024
A Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI... Moderate Unreviewed
CVE-2023-51455 was published Apr 2, 2024
Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in... Moderate Unreviewed
CVE-2023-33111 was published Apr 1, 2024
Improper validation of array index vulnerability in UserPrivilege.Enum webapi component in... Moderate Unreviewed
CVE-2024-29231 was published Mar 28, 2024
In the Linux kernel, the following vulnerability has been resolved: thermal/drivers... Moderate Unreviewed
CVE-2020-36776 was published Feb 27, 2024
tiny-curl-8_4_0 , curl-8_4_0 and curl-8_5_0 were discovered to contain an off-by-one out-of... Moderate Unreviewed
CVE-2023-52071 was published Jan 30, 2024
A vulnerability classified as problematic was found in Apryse iText 8.0.2. This vulnerability... Moderate Unreviewed
CVE-2023-6298 was published Nov 27, 2023
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU... Moderate Unreviewed
CVE-2022-33289 was published Apr 13, 2023
In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to... Moderate Unreviewed
CVE-2023-20633 was published Mar 7, 2023
In engineermode services, there is a missing permission check. This could lead to local denial of... Moderate Unreviewed
CVE-2022-47346 was published Feb 12, 2023
In engineermode services, there is a missing permission check. This could lead to local denial of... Moderate Unreviewed
CVE-2022-47343 was published Feb 12, 2023
In engineermode services, there is a missing permission check. This could lead to local denial of... Moderate Unreviewed
CVE-2022-47345 was published Feb 12, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database