Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,238
Erlang
31
GitHub Actions
21
Go
2,005
Maven
5,000+
npm
3,716
NuGet
661
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+

267 advisories

Loading
In the Linux kernel, the following vulnerability has been resolved: fuse: Initialize beyond-EOF... Moderate Unreviewed
CVE-2024-44947 was published Sep 2, 2024
Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R)... Moderate Unreviewed
CVE-2024-25563 was published Nov 13, 2024
The fetch(3) library uses environment variables for passing certain information, including the... High Unreviewed
CVE-2024-45289 was published Nov 12, 2024
Interpreter crash from `tf.io.decode_raw` Moderate
CVE-2021-29614 was published for tensorflow (pip) May 21, 2021
Incomplete validation in `tf.raw_ops.CTCLoss` Moderate
CVE-2021-29613 was published for tensorflow (pip) May 21, 2021
Invalid validation in `QuantizeAndDequantizeV2` Low
CVE-2021-29610 was published for tensorflow (pip) May 21, 2021
Incomplete validation in `SparseReshape` Low
CVE-2021-29611 was published for tensorflow (pip) May 21, 2021
Incomplete validation in `SparseAdd` Moderate
CVE-2021-29609 was published for tensorflow (pip) May 21, 2021
Improper initialization for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software... Moderate Unreviewed
CVE-2023-28720 was published Oct 29, 2024
Improper initialization in some Intel(R) MAS software before version 2.3 may allow an... Moderate Unreviewed
CVE-2023-36490 was published Oct 25, 2024
Code execution vulnerability in HtmlUnit High
CVE-2020-5529 was published for net.sourceforge.htmlunit:htmlunit (Maven) May 21, 2020
Improper Initialization in Pillow Moderate
CVE-2022-22815 was published for Pillow (pip) Jan 12, 2022
sunSUNQ
Windows Installer Elevation of Privilege Vulnerability High Unreviewed
CVE-2021-1661 was published May 24, 2022
In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure that... Moderate Unreviewed
CVE-2024-46697 was published Sep 13, 2024
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable:... Moderate Unreviewed
CVE-2024-45018 was published Sep 11, 2024
When the isula load command is used to load malicious images, attackers can execute arbitrary... High Unreviewed
CVE-2021-33636 was published Oct 29, 2023
When malicious images are pulled by isula pull, attackers can execute arbitrary code. High Unreviewed
CVE-2021-33635 was published Oct 29, 2023
In the Linux kernel, the following vulnerability has been resolved: net/9p: fix uninit-value in... Moderate Unreviewed
CVE-2024-39301 was published Jun 25, 2024
Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0... Moderate Unreviewed
CVE-2023-40261 was published Aug 8, 2024
Improper initialization in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an... High Unreviewed
CVE-2023-28737 was published Nov 14, 2023
Improper initialization in the Linux kernel mode driver for some Intel(R) Ethernet Network... Critical Unreviewed
CVE-2024-21807 was published Aug 14, 2024
Improper initialization for the Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software... Low Unreviewed
CVE-2023-35061 was published Aug 14, 2024
Improper initialization in firmware for some Intel(R) CSME may allow a privileged user to... Moderate Unreviewed
CVE-2023-48361 was published Aug 14, 2024
Moby Docker cp broken with debian containers Critical
CVE-2019-14271 was published for github.com/docker/docker (Go) May 24, 2022
yoshizawa-masatoshi neersighted
An improper input validation allows an unauthenticated attacker to achieve remote command... Critical Unreviewed
CVE-2024-36455 was published Jul 15, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database