Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,354
Erlang
31
GitHub Actions
22
Go
2,120
Maven
5,000+
npm
3,779
NuGet
681
pip
3,460
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+

1,404 advisories

Loading
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via... Critical Unreviewed
CVE-2019-3568 was published May 24, 2022
An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer... Critical Unreviewed
CVE-2020-29557 was published May 24, 2022
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x... Critical Unreviewed
CVE-2021-22991 was published May 24, 2022
NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5... Critical Unreviewed
CVE-2017-6862 was published May 17, 2022
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session... Critical Unreviewed
CVE-2018-7445 was published May 14, 2022
A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which... Critical Unreviewed
CVE-2021-46760 was published May 9, 2023
The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which... Critical Unreviewed
CVE-2016-4303 was published May 13, 2022
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not... Critical Unreviewed
CVE-2017-11076 was published Nov 26, 2024
Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote... Critical Unreviewed
CVE-2024-7024 was published Sep 24, 2024
Vyper's bounds check on built-in `slice()` function can be overflowed Critical
CVE-2024-24561 was published for vyper (pip) Feb 1, 2024
zobront kuroi8
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability... Critical Unreviewed
CVE-2024-8938 was published Nov 13, 2024
During DOM manipulations of the accessibility tree through script, the DOM tree can become out of... Critical Unreviewed
CVE-2017-5464 was published May 14, 2022
A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG... Critical Unreviewed
CVE-2017-7786 was published May 14, 2022
Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex.... Critical Unreviewed
CVE-2017-5469 was published May 14, 2022
Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these... Critical Unreviewed
CVE-2018-5188 was published May 14, 2022
Heap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in... Critical Unreviewed
CVE-2016-5270 was published May 14, 2022
A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable... Critical Unreviewed
CVE-2017-5459 was published May 14, 2022
Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird... Critical Unreviewed
CVE-2017-5429 was published May 14, 2022
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0,... Critical Unreviewed
CVE-2016-5257 was published May 14, 2022
Buffer Overflow in pycrypto Critical
CVE-2013-7459 was published for pycrypto (pip) Dec 14, 2018
A heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when... Critical Unreviewed
CVE-2021-20204 was published May 24, 2022
Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote... Critical Unreviewed
CVE-2023-1529 was published Mar 21, 2023
Pillow Integer overflow in ImagingResampleHorizontal Critical
CVE-2016-4009 was published for pillow (pip) Jul 24, 2018
Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of... Critical Unreviewed
CVE-2024-9402 was published Oct 1, 2024
Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird... Critical Unreviewed
CVE-2024-9401 was published Oct 1, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database