GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
2,000
Maven
5,000+
npm
3,711
NuGet
661
pip
3,383
Pub
11
RubyGems
885
Rust
849
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
154 advisories
Filter by severity
RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 implements the incorrect exception...
Moderate
Unreviewed
CVE-2022-34643
was published
Jul 19, 2022
CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit...
Moderate
Unreviewed
CVE-2022-34636
was published
Jul 19, 2022
CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a implements an incorrect exception type when...
Moderate
Unreviewed
CVE-2022-34637
was published
Jul 19, 2022
Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker...
Moderate
Unreviewed
CVE-2022-1965
was published
Jun 25, 2022
An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an...
Moderate
Unreviewed
CVE-2022-32990
was published
Jun 25, 2022
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers...
Moderate
Unreviewed
CVE-2022-30723
was published
Jun 8, 2022
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers...
Moderate
Unreviewed
CVE-2022-30724
was published
Jun 8, 2022
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers...
Moderate
Unreviewed
CVE-2022-30725
was published
Jun 8, 2022
Unprotected broadcast in sendIntentForToastDumpLog in DisplayToast prior to SMR Jun-2022 Release...
Moderate
Unreviewed
CVE-2022-30716
was published
Jun 8, 2022
Improper handling of insufficient permissions vulnerability in addAppPackageNameToAllowList in...
Moderate
Unreviewed
CVE-2022-30727
was published
Jun 8, 2022
Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory...
Moderate
Unreviewed
CVE-2020-26195
was published
May 24, 2022
** DISPUTED ** Styra Open Policy Agent (OPA) Gatekeeper through 3.7.0 mishandles concurrency,...
Moderate
Unreviewed
CVE-2021-43979
was published
May 24, 2022
A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive...
Moderate
Unreviewed
CVE-2021-34787
was published
May 24, 2022
A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved...
Moderate
Unreviewed
CVE-2021-0297
was published
May 24, 2022
Assuming a shell privilege is gained, an improper exception handling for...
Moderate
Unreviewed
CVE-2021-25473
was published
May 24, 2022
Assuming a shell privilege is gained, an improper exception handling for...
Moderate
Unreviewed
CVE-2021-25474
was published
May 24, 2022
Certain Federal Office of Information Technology Systems and Telecommunication FOITT products are...
Moderate
Unreviewed
CVE-2021-37786
was published
May 24, 2022
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM...
Moderate
Unreviewed
CVE-2021-37175
was published
May 24, 2022
Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x improperly handle an exceptional condition. A...
Moderate
Unreviewed
CVE-2021-21592
was published
May 24, 2022
Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before...
Moderate
Unreviewed
CVE-2021-0003
was published
May 24, 2022
Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and...
Moderate
Unreviewed
CVE-2021-0007
was published
May 24, 2022
Improper conditions check in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and...
Moderate
Unreviewed
CVE-2021-0006
was published
May 24, 2022
Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and...
Moderate
Unreviewed
CVE-2021-0005
was published
May 24, 2022
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it...
Moderate
Unreviewed
CVE-2021-1102
was published
May 24, 2022
An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers...
Moderate
Unreviewed
CVE-2020-19473
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API