Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,246
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

417 advisories

Loading
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be... High Unreviewed
CVE-2020-25709 was published May 24, 2022
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be... High Unreviewed
CVE-2020-20178 was published May 24, 2022
Incomplete validation in signal ops leads to crashes in TensorFlow Moderate
CVE-2022-29213 was published for tensorflow (pip) May 24, 2022
An authorized user may trigger an invariant which may result in denial of service or server exit... Moderate Unreviewed
CVE-2021-32037 was published May 24, 2022
Possible denial of service scenario due to improper input validation of received NAS OTA message... High Unreviewed
CVE-2021-1982 was published May 24, 2022
A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure... High Unreviewed
CVE-2021-33600 was published May 24, 2022
Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon... High Unreviewed
CVE-2021-1971 was published May 24, 2022
Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature... High Unreviewed
CVE-2021-38385 was published May 24, 2022
libjxl v0.5.0 is affected by a Assertion failed issue in lib/jxl/image.cc jxl::PlaneBase:... High Unreviewed
CVE-2021-36691 was published May 24, 2022
Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in... High Unreviewed
CVE-2021-40083 was published May 24, 2022
A denial of service vulnerability exists in the ASDU message processing functionality of MZ... High Unreviewed
CVE-2021-21778 was published May 24, 2022
liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application... Moderate Unreviewed
CVE-2021-39283 was published May 24, 2022
In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a... High Unreviewed
CVE-2021-25218 was published May 24, 2022
FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df05e1640) suffers from a an assertion... High Unreviewed
CVE-2021-38291 was published May 24, 2022
An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re... Moderate Unreviewed
CVE-2021-31878 was published May 24, 2022
Mikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in... Moderate Unreviewed
CVE-2020-20262 was published May 24, 2022
A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance (ASA)... High Unreviewed
CVE-2021-1422 was published May 24, 2022
** UNSUPPORTED WHEN ASSIGNED ** Polipo through 1.1.1 allows denial of service via a reachable... High Unreviewed
CVE-2020-36420 was published May 24, 2022
An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement... High Unreviewed
CVE-2021-1887 was published May 24, 2022
Possible assertion due to improper verification while creating and deleting the peer in... High Unreviewed
CVE-2021-1938 was published May 24, 2022
Improper handling of received malformed FTMR request frame can lead to reachable assertion while... High Unreviewed
CVE-2021-1953 was published May 24, 2022
Denial of service in SAP case due to improper handling of connections when association is... High Unreviewed
CVE-2021-1955 was published May 24, 2022
Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an assertion failure vulnerability in the ... Moderate Unreviewed
CVE-2020-20211 was published May 24, 2022
Mikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in... Moderate Unreviewed
CVE-2020-20225 was published May 24, 2022
There is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at... High Unreviewed
CVE-2020-23310 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API