Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,985
Maven
5,000+
npm
3,701
NuGet
657
pip
3,326
Pub
11
RubyGems
882
Rust
836
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,198 advisories

Loading
In the Linux kernel, the following vulnerability has been resolved: net: wwan: fix global oob in... High Unreviewed
CVE-2024-50128 was published Nov 5, 2024
In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR3[4:0]... High Unreviewed
CVE-2024-50115 was published Nov 5, 2024
In the Linux kernel, the following vulnerability has been resolved: bpf: Add the missing... High Unreviewed
CVE-2024-50123 was published Nov 5, 2024
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob... High Unreviewed
CVE-2024-47757 was published Oct 21, 2024
In the Linux kernel, the following vulnerability has been resolved: jfs: fix out-of-bounds in... High Unreviewed
CVE-2024-47723 was published Oct 21, 2024
In the Linux kernel, the following vulnerability has been resolved: parport: Proper fix for... High Unreviewed
CVE-2024-50074 was published Oct 29, 2024
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix global oob in... High Unreviewed
CVE-2024-26608 was published Mar 11, 2024
Transient DOS while processing the CU information from RNR IE. High Unreviewed
CVE-2024-38405 was published Nov 4, 2024
Transient DOS while parsing BTM ML IE when per STA profile is not included. High Unreviewed
CVE-2024-38403 was published Nov 4, 2024
When storing and re-accessing data on a networking channel, the length of buffers may have been... High Unreviewed
CVE-2024-1546 was published Feb 20, 2024
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec... High Unreviewed
CVE-2021-4034 was published Jan 29, 2022
In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix shift-out-of... High Unreviewed
CVE-2021-47044 was published Feb 28, 2024
In set_secure_reg of sac_handler.c, there is a possible out of bounds read due to a missing... High Unreviewed
CVE-2024-32920 was published Jun 13, 2024
An issue in FME Modules fileuploads v.2.0.3 and before and fixed in v2.0.4 allows a remote... High Unreviewed
CVE-2024-33270 was published Apr 30, 2024
In the Linux kernel, the following vulnerability has been resolved: ipv4: Handle attempt to... High Unreviewed
CVE-2022-48999 was published Oct 21, 2024
An invalid read size in Nanomq v0.21.9 allows attackers to cause a Denial of Service (DoS). High Unreviewed
CVE-2024-44460 was published Sep 12, 2024
In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Prevent out... High Unreviewed
CVE-2024-26588 was published Feb 22, 2024
A maliciously crafted CATPART file when parsed in CC5Dll.dll through Autodesk AutoCAD can force... High Unreviewed
CVE-2024-9827 was published Oct 30, 2024
A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force... High Unreviewed
CVE-2024-8588 was published Oct 30, 2024
A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force... High Unreviewed
CVE-2024-8589 was published Oct 30, 2024
Repeated writes to history interface attributes could have been used to cause a Denial of Service... High Unreviewed
CVE-2024-10464 was published Oct 29, 2024
TOTOLINK CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow... High Unreviewed
CVE-2024-34200 was published May 14, 2024
D-Link DIR-822+ v1.0.5 was discovered to contain a stack-based buffer overflow vulnerability in... High Unreviewed
CVE-2024-34950 was published May 14, 2024
Buffer Overflow vulnerability in Waxlab wax v.0.9-3 and before allows an attacker to cause a... High Unreviewed
CVE-2024-31714 was published May 20, 2024
root privileges via buffer overflow in ordist command on SGI IRIX systems. High Unreviewed
CVE-1999-0029 was published Apr 30, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database