GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+
67 advisories
Filter by severity
Buffer Overflow in node-weakauras-parser
Moderate
GHSA-86mr-6m89-vgj3
was published
for
node-weakauras-parser
(npm)
Sep 3, 2020
Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration
Low
GHSA-f366-4rvv-95x2
was published
for
cryptoauthlib
(pip)
Oct 2, 2020
Buffer Copy without Checking Size of Input in NumPy
Moderate
CVE-2021-41496
was published
for
numpy
(pip)
Feb 8, 2022
Buffer overflow in Jenkins WMI Windows Agents plugin
Moderate
CVE-2022-30950
was published
for
org.jenkins-ci.plugins:windows-slaves
(Maven)
May 18, 2022
Overflow/denial of service in `tf.raw_ops.ReverseSequence`
Low
CVE-2021-29575
was published
for
tensorflow
(pip)
May 21, 2021
Heap buffer overflow in `BandedTriangularSolve`
Low
CVE-2021-29612
was published
for
tensorflow
(pip)
May 21, 2021
Heap buffer overflow in `RaggedBinCount`
Low
CVE-2021-29512
was published
for
tensorflow
(pip)
May 21, 2021
Heap buffer overflow in `Conv3DBackprop*`
Low
CVE-2021-29520
was published
for
tensorflow
(pip)
May 21, 2021
Heap buffer overflow in `Conv2DBackpropFilter`
Low
CVE-2021-29540
was published
for
tensorflow
(pip)
May 21, 2021
Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord`
High
CVE-2021-37650
was published
for
tensorflow
(pip)
Aug 25, 2021
Access to invalid memory during shape inference in `Cudnn*` ops
High
CVE-2021-41221
was published
for
tensorflow
(pip)
Nov 10, 2021
Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
High
CVE-2017-12601
was published
for
opencv-contrib-python
(pip)
Oct 12, 2021
Heap buffer overflow in `Transpose`
Moderate
CVE-2021-41216
was published
for
tensorflow
(pip)
Nov 10, 2021
X.509 Email Address Variable Length Buffer Overflow
High
CVE-2022-3786
was published
for
openssl-src
(Rust)
Nov 1, 2022
node-bluetooth is vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation
Critical
CVE-2023-26110
was published
for
node-bluetooth
(npm)
Mar 9, 2023
node-bluetooth-serial-port is vulnerable to Buffer Overflow via the findSerialPortChannel
Critical
CVE-2023-26109
was published
for
node-bluetooth-serial-port
(npm)
Mar 9, 2023
TensorFlow has Heap-buffer-overflow in AvgPoolGrad
High
CVE-2023-25664
was published
for
tensorflow
(pip)
Mar 24, 2023
Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite
High
CVE-2022-41894
was published
for
tensorflow
(pip)
Nov 21, 2022
Out-of-bounds Write in OpenCV
High
CVE-2019-5064
was published
for
opencv-contrib-python
(pip)
Oct 12, 2021
ProTip!
Advisories are also available from the
GraphQL API