Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,354
Erlang
31
GitHub Actions
22
Go
2,120
Maven
5,000+
npm
3,779
NuGet
681
pip
3,460
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

185 advisories

Loading
In Bluetooth FW, there is a possible reachable assertion due to improper exception handling. This... Moderate Unreviewed
CVE-2024-20147 was published Feb 3, 2025
A reachable assertion in the ogs_kdf_hash_mme function of Open5GS <= 2.6.4 allows attackers to... Moderate Unreviewed
CVE-2024-24432 was published Jan 22, 2025
Open5GS MME versions <= 2.6.4 contain a buffer overflow in the ASN.1 deserialization function of... Moderate Unreviewed
CVE-2023-37008 was published Jan 22, 2025
Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed... Moderate Unreviewed
CVE-2023-37007 was published Jan 22, 2025
Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed... Moderate Unreviewed
CVE-2023-37004 was published Jan 22, 2025
Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed... Moderate Unreviewed
CVE-2023-37003 was published Jan 22, 2025
Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed... Moderate Unreviewed
CVE-2023-37002 was published Jan 22, 2025
Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed... Moderate Unreviewed
CVE-2023-37005 was published Jan 22, 2025
Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed... Moderate Unreviewed
CVE-2023-37006 was published Jan 22, 2025
Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed... Moderate Unreviewed
CVE-2023-37010 was published Jan 22, 2025
Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed... Moderate Unreviewed
CVE-2023-37009 was published Jan 22, 2025
Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed... Moderate Unreviewed
CVE-2023-37011 was published Jan 22, 2025
Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed... Moderate Unreviewed
CVE-2023-37012 was published Jan 22, 2025
In the Linux kernel, the following vulnerability has been resolved: btrfs: remove BUG() after... Moderate Unreviewed
CVE-2023-52569 was published Mar 3, 2024
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_socket:... Moderate Unreviewed
CVE-2024-56783 was published Jan 8, 2025
In wlan STA driver, there is a possible reachable assertion due to improper exception handling.... Moderate Unreviewed
CVE-2024-20152 was published Jan 6, 2025
Due to an unchecked buffer length, a specially crafted L2CAP packet can cause a buffer overflow.... Moderate Unreviewed
CVE-2024-7139 was published Dec 19, 2024
An assert may be triggered, causing a temporary denial of service when a peer device sends a... Moderate Unreviewed
CVE-2024-7138 was published Dec 19, 2024
In the Linux kernel, the following vulnerability has been resolved: closures: Change BUG_ON() to... Moderate Unreviewed
CVE-2024-42252 was published Aug 8, 2024
In Bluetooth firmware, there is a possible firmware asssert due to improper handling of... Moderate Unreviewed
CVE-2024-20139 was published Dec 2, 2024
A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of... Moderate Unreviewed
CVE-2021-1440 was published Nov 18, 2024
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't readahead the... Moderate Unreviewed
CVE-2024-49932 was published Oct 21, 2024
In btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an... Moderate Unreviewed
CVE-2024-23850 was published Jan 23, 2024
TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to... Moderate Unreviewed
CVE-2024-50615 was published Oct 28, 2024
TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application... Moderate Unreviewed
CVE-2024-50614 was published Oct 28, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database