GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,324
Erlang
31
GitHub Actions
21
Go
2,087
Maven
5,000+
npm
3,751
NuGet
674
pip
3,437
Pub
12
RubyGems
892
Rust
881
Swift
37
Unreviewed advisories
All unreviewed
5,000+
6,078 advisories
Filter by severity
Heap OOB in TFLite's `Gather*` implementations
Moderate
CVE-2021-37687
was published
for
tensorflow
(pip)
Aug 25, 2021
Heap OOB in nested `tf.map_fn` with `RaggedTensor`s
High
CVE-2021-37679
was published
for
tensorflow
(pip)
Aug 25, 2021
Heap OOB in `SdcaOptimizerV2`
Moderate
CVE-2021-37672
was published
for
tensorflow
(pip)
Aug 25, 2021
Heap OOB in `UpperBound` and `LowerBound`
Moderate
CVE-2021-37670
was published
for
tensorflow
(pip)
Aug 25, 2021
Reference binding to nullptr and heap OOB in binary cwise ops
High
CVE-2021-37659
was published
for
tensorflow
(pip)
Aug 25, 2021
Heap OOB in `ResourceScatterUpdate`
High
CVE-2021-37655
was published
for
tensorflow
(pip)
Aug 25, 2021
Heap OOB and CHECK fail in `ResourceGather`
High
CVE-2021-37654
was published
for
tensorflow
(pip)
Aug 25, 2021
Heap buffer overflow in `FractionalAvgPoolGrad`
High
CVE-2021-37651
was published
for
tensorflow
(pip)
Aug 25, 2021
Null pointer dereference and heap OOB read in operations restoring tensors
High
CVE-2021-37639
was published
for
tensorflow
(pip)
Aug 25, 2021
Heap out of bounds access in sparse reduction operations
High
CVE-2021-37635
was published
for
tensorflow
(pip)
Aug 25, 2021
Out of bounds access in compact_arena
Critical
CVE-2019-16139
was published
for
compact_arena
(Rust)
Aug 25, 2021
Out of bounds access in lucet-runtime-internals
Critical
CVE-2020-35859
was published
for
lucet-runtime-internals
(Rust)
Aug 25, 2021
Out of bounds read in simple-slab
Critical
CVE-2020-35892
was published
for
simple-slab
(Rust)
Aug 25, 2021
Out of bounds read in lazy-init
Moderate
CVE-2021-25901
was published
for
lazy-init
(Rust)
Aug 25, 2021
ProTip!
Advisories are also available from the
GraphQL API