Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,985
Maven
5,000+
npm
3,701
NuGet
657
pip
3,326
Pub
11
RubyGems
882
Rust
836
Swift
35
Unreviewed advisories
All unreviewed
5,000+

5,573 advisories

Loading
A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based... High Unreviewed
CVE-2024-7994 was published Oct 17, 2024
protobuf susceptible to buffer overflow High
CVE-2015-5237 was published for Google.Protobuf (Composer) May 13, 2022
qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds... High Unreviewed
CVE-2023-31436 was published Apr 28, 2023
Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR... High Unreviewed
CVE-2022-38478 was published Dec 22, 2022
An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media... High Unreviewed
CVE-2017-5448 was published May 14, 2022
Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent... High Unreviewed
CVE-2016-10196 was published May 13, 2022
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite... High Unreviewed
CVE-2017-5436 was published May 14, 2022
An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered... High Unreviewed
CVE-2024-0229 was published Feb 9, 2024
Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2024-45143 was published Oct 9, 2024
Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2024-45139 was published Oct 9, 2024
Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a... High Unreviewed
CVE-2024-47963 was published Oct 10, 2024
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to... High Unreviewed
CVE-2024-47962 was published Oct 10, 2024
Buffer overflow vulnerability in the signelf library used by Zscaler Client Connector on Linux... High Unreviewed
CVE-2023-28793 was published Oct 23, 2023
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to... High Unreviewed
CVE-2024-47964 was published Oct 10, 2024
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds... High Unreviewed
CVE-2024-7993 was published Oct 17, 2024
A vulnerability classified as critical has been found in Tenda O6 1.0.0.7(2054). Affected is the... High Unreviewed
CVE-2024-8231 was published Aug 28, 2024
An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security... High Unreviewed
CVE-2024-0646 was published Jan 17, 2024
Stack-based buffer overflow vulnerability exists in Kostac PLC Programming Software (Former name:... High Unreviewed
CVE-2024-47135 was published Oct 3, 2024
xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data,... High Unreviewed
CVE-2024-43700 was published Aug 29, 2024
Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker... High Unreviewed
CVE-2024-7534 was published Aug 6, 2024
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker... High Unreviewed
CVE-2024-8198 was published Aug 29, 2024
ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to... High Unreviewed
CVE-2023-28703 was published Jul 6, 2023
Pillow Out-of-bounds Write High
CVE-2020-35654 was published for Pillow (pip) Mar 18, 2021
sunSUNQ
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2024-47417 was published Oct 9, 2024
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Stack-based Buffer Overflow... High Unreviewed
CVE-2024-47410 was published Oct 9, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database