Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,985
Maven
5,000+
npm
3,701
NuGet
657
pip
3,326
Pub
11
RubyGems
882
Rust
836
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

25 advisories

Loading
An information disclosure issue has been discovered in GitLab EE affecting all versions starting... Moderate Unreviewed
CVE-2024-4278 was published Sep 26, 2024
A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset... Moderate Unreviewed
CVE-2023-5088 was published Nov 3, 2023
In the Linux kernel, the following vulnerability has been resolved: tracing: Restructure... Moderate Unreviewed
CVE-2021-46939 was published Feb 27, 2024
In the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::get_mut... Moderate Unreviewed
CVE-2018-25008 was published May 24, 2022
Improper locking in the Power Management Controller (PMC) for some Intel Chipset firmware before... Moderate Unreviewed
CVE-2021-0147 was published Feb 11, 2022
In adsp, there is a possible double free due to a race condition. This could lead to local... Moderate Unreviewed
CVE-2023-20625 was published Mar 7, 2023
In gpu, there is a possible use after free due to a race condition. This could lead to local... Moderate Unreviewed
CVE-2023-20611 was published Feb 6, 2023
In ccu, there is a possible memory corruption due to a race condition. This could lead to local... Moderate Unreviewed
CVE-2023-20607 was published Feb 6, 2023
In display drm, there is a possible memory corruption due to a race condition. This could lead to... Moderate Unreviewed
CVE-2023-20610 was published Feb 6, 2023
In ccd, there is a possible memory corruption due to a race condition. This could lead to local... Moderate Unreviewed
CVE-2022-32642 was published Feb 6, 2023
In ccd, there is a possible use after free due to a race condition. This could lead to local... Moderate Unreviewed
CVE-2022-32643 was published Feb 6, 2023
In isp, there is a possible use after free due to improper locking. This could lead to local... Moderate Unreviewed
CVE-2022-26452 was published Oct 8, 2022
In vdec fmt, there is a possible use after free due to improper locking. This could lead to local... Moderate Unreviewed
CVE-2022-26473 was published Oct 8, 2022
In disp, there is a possible use after free due to a race condition. This could lead to local... Moderate Unreviewed
CVE-2022-32648 was published Jan 3, 2023
In vow, there is a possible information disclosure due to a race condition. This could lead to... Moderate Unreviewed
CVE-2022-32645 was published Jan 3, 2023
In vow, there is a possible use after free due to a race condition. This could lead to local... Moderate Unreviewed
CVE-2022-32644 was published Jan 3, 2023
In vcu, there is a possible use after free due to a race condition. This could lead to local... Moderate Unreviewed
CVE-2022-32610 was published Nov 9, 2022
In vcu, there is a possible use after free due to a race condition. This could lead to local... Moderate Unreviewed
CVE-2022-32609 was published Nov 9, 2022
In vcu, there is a possible use after free due to a race condition. This could lead to local... Moderate Unreviewed
CVE-2022-32612 was published Nov 9, 2022
In vcu, there is a possible memory corruption due to a race condition. This could lead to local... Moderate Unreviewed
CVE-2022-32613 was published Nov 9, 2022
An improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in... Moderate Unreviewed
CVE-2021-25376 was published May 24, 2022
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an... Moderate Unreviewed
CVE-2020-3471 was published May 24, 2022
An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers... Moderate Unreviewed
CVE-2020-12769 was published May 24, 2022
In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to... Moderate Unreviewed
CVE-2019-17185 was published May 24, 2022
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of... Moderate Unreviewed
CVE-2019-17344 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database