Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,239
Erlang
31
GitHub Actions
21
Go
2,007
Maven
5,000+
npm
3,716
NuGet
662
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+

471 advisories

Loading
A double-Free vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2.... High Unreviewed
CVE-2017-14449 was published May 13, 2022
An exploitable double-free vulnerability exists in the Office Open XML parser of Atlantis Word... High Unreviewed
CVE-2018-4000 was published May 13, 2022
An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall.... Critical Unreviewed
CVE-2018-3985 was published May 13, 2022
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument... High Unreviewed
CVE-2018-3855 was published May 13, 2022
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument... High Unreviewed
CVE-2018-3845 was published May 13, 2022
Double free vulnerability in the format printer in PHP 7.x before 7.0.1 allows remote attackers... Critical Unreviewed
CVE-2015-8880 was published May 13, 2022
fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary... High Unreviewed
CVE-2016-5384 was published May 13, 2022
In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12... Moderate Unreviewed
CVE-2017-6166 was published May 13, 2022
libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double... Critical Unreviewed
CVE-2018-16402 was published May 13, 2022
Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in... Moderate Unreviewed
CVE-2015-1239 was published May 13, 2022
Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16... High Unreviewed
CVE-2015-0312 was published May 13, 2022
An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the... Critical Unreviewed
CVE-2018-17825 was published May 13, 2022
An issue was discovered in CImg v.220. A double free in load_bmp in CImg.h occurs when loading a... High Unreviewed
CVE-2018-7589 was published May 13, 2022
Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have... High Unreviewed
CVE-2017-5506 was published May 13, 2022
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially... High Unreviewed
CVE-2018-15518 was published May 13, 2022
An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in... Critical Unreviewed
CVE-2018-18751 was published May 13, 2022
WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a... High Unreviewed
CVE-2018-8804 was published May 13, 2022
Double free vulnerability in the snd_seq_oss_open function in sound/core/seq/oss/seq_oss_init.c... High Unreviewed
CVE-2010-3080 was published May 13, 2022
Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8... High Unreviewed
CVE-2010-4494 was published May 13, 2022
Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote... High Unreviewed
CVE-2011-2821 was published May 13, 2022
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote... Moderate Unreviewed
CVE-2011-2834 was published May 13, 2022
Double free vulnerability in the Theora decoder in Google Chrome before 15.0.874.120 allows... High Unreviewed
CVE-2011-3892 was published May 13, 2022
A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors. Critical Unreviewed
CVE-2017-1000232 was published May 13, 2022
Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function... High Unreviewed
CVE-2018-1000222 was published May 13, 2022
The read_MSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause... Moderate Unreviewed
CVE-2018-20450 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database