Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
101
GitHub Actions
54
Go
4,282
Maven
5,000+
npm
5,000+
NuGet
1,029
pip
5,000+
Pub
13
RubyGems
1,105
Rust
1,490
Swift
61
Unreviewed advisories
All unreviewed
5,000+

77 advisories

Loading
Go package github.com/notaryproject/notation configured with permissive trust policies potentially susceptible to rollback attack from compromised registry Moderate
CVE-2024-23332 was published for github.com/notaryproject/notation (Go) Jan 19, 2024
JustinCappos Credited to JustinCappos
The caching invalidation guidelines from the AMD-Vi specification (48882—Rev 3.07-PUB—Oct 2022)... High Unreviewed
CVE-2023-34326 was published Jan 5, 2024
TouchLink packets processed after timeout or out of range due to Operation on a Resource after... Critical Unreviewed
CVE-2023-41094 was published Oct 4, 2023
Pow Mnesia cache doesn't invalidate all expired keys on startup Moderate
CVE-2023-42446 was published for pow (Erlang) Sep 19, 2023
gVirtu Credited to gVirtu
An issue with app access to camera data was addressed with improved logic. This issue is fixed in... Low Unreviewed
CVE-2022-42838 was published Feb 27, 2023
By using XSL Transforms, a malicious webserver could have served a user an XSL document that... High Unreviewed
CVE-2022-22755 was published Dec 22, 2022
User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can... Moderate Unreviewed
CVE-2022-45292 was published Dec 10, 2022
An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended... High Unreviewed
CVE-2022-30256 was published Nov 19, 2022
Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow... Moderate Unreviewed
CVE-2022-27499 was published Nov 11, 2022
A flaw was found in OpenStack. The application credential tokens can be used even after they have... High Unreviewed
CVE-2022-2447 was published Sep 2, 2022
When Responsive Design Mode was enabled, it used references to objects that were previously freed... High Unreviewed
CVE-2021-23995 was published May 24, 2022
A denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack... High Unreviewed
CVE-2020-13530 was published May 24, 2022
get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege... High Unreviewed
CVE-2020-25221 was published May 24, 2022
ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated... High Unreviewed
CVE-2020-24030 was published May 24, 2022
An invalid memory address dereference was discovered in load_pnm in frompnm.c in libsixel before... Moderate Unreviewed
CVE-2019-20022 was published May 24, 2022
TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to... High Unreviewed
CVE-2019-15691 was published May 24, 2022
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the... High Unreviewed
CVE-2017-14895 was published May 13, 2022
An elevation of privilege vulnerability in CameraBase could enable a local malicious application... High Unreviewed
CVE-2017-0544 was published May 13, 2022
A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo. Moderate Unreviewed
CVE-2021-42778 was published Apr 19, 2022
An Operation on a Resource after Expiration or Release vulnerability in the Routing Protocol... High Unreviewed
CVE-2022-22197 was published Apr 15, 2022
Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its... High Unreviewed
CVE-2021-33020 was published Apr 3, 2022
IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user... High Unreviewed
CVE-2022-22332 was published Apr 2, 2022
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),... High Unreviewed
CVE-2021-37204 was published Feb 10, 2022
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),... High Unreviewed
CVE-2021-37185 was published Feb 10, 2022
Update unsound DrainFilter and RString::retain High
CVE-2020-36212 was published for abi_stable (Rust) Aug 25, 2021
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database