GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,324
Erlang
31
GitHub Actions
21
Go
2,087
Maven
5,000+
npm
3,751
NuGet
674
pip
3,437
Pub
12
RubyGems
892
Rust
881
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
296 advisories
Filter by severity
Joomla! 1.03 does not restrict the number of "Search" Mambots, which allows remote attackers to...
Moderate
Unreviewed
CVE-2005-4650
was published
May 1, 2022
Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of...
Moderate
Unreviewed
CVE-2019-9516
was published
May 24, 2022
mp4v2 v2.1.2 was discovered to contain a memory leak via the class MP4BytesProperty.
Moderate
Unreviewed
CVE-2023-33720
was published
May 26, 2023
An allocation of resources without limits or throttling [CWE-770] vulnerability in FortiOS...
Moderate
Unreviewed
CVE-2024-46666
was published
Jan 14, 2025
An issue found in Wave Animated Keyboard Emoji v.1.70.7 for Android allows a local attacker to...
Moderate
Unreviewed
CVE-2023-29737
was published
May 30, 2023
If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly...
Moderate
Unreviewed
CVE-2023-0616
was published
Jun 2, 2023
Regular expressions used to filter out forbidden properties and values from style directives in...
Moderate
Unreviewed
CVE-2023-23603
was published
Jun 2, 2023
In the Linux kernel, the following vulnerability has been resolved:
media: s5p_cec: limit msg...
Moderate
Unreviewed
CVE-2022-49035
was published
Jan 2, 2025
In the Linux kernel, the following vulnerability has been resolved:
RDMA/hns: Fix cpu stuck...
Moderate
Unreviewed
CVE-2024-56722
was published
Dec 29, 2024
IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1...
Moderate
Unreviewed
CVE-2022-22491
was published
Jan 9, 2025
In dialer service, there is a possible missing permission check. This could lead to local denial...
Moderate
Unreviewed
CVE-2022-48440
was published
Jun 6, 2023
In dialer service, there is a possible missing permission check. This could lead to local denial...
Moderate
Unreviewed
CVE-2022-48441
was published
Jun 6, 2023
IBM Security ReaQta 3.12 could allow a privileged user to cause a denial of service by sending...
Moderate
Unreviewed
CVE-2024-45100
was published
Jan 7, 2025
An issue found in CrossX v.1.15.3 for Android allows a local attacker to cause a persistent...
Moderate
Unreviewed
CVE-2023-29767
was published
Jun 9, 2023
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is...
Moderate
Unreviewed
CVE-2023-30443
was published
Dec 19, 2024
In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due...
Moderate
Unreviewed
CVE-2024-0026
was published
May 7, 2024
In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to...
Moderate
Unreviewed
CVE-2024-0027
was published
May 7, 2024
HP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface...
Moderate
Unreviewed
CVE-2023-30903
was published
Jun 16, 2023
Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before...
Moderate
Unreviewed
CVE-2024-2446
was published
Mar 15, 2024
The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2,...
Moderate
Unreviewed
CVE-2024-54501
was published
Dec 12, 2024
An issue was discovered in GitLab CE/EE affecting all versions starting from 13.9 before 17.4.6,...
Moderate
Unreviewed
CVE-2024-9367
was published
Dec 12, 2024
In the Linux kernel, the following vulnerability has been resolved:
IB/core: Implement a limit...
Moderate
Unreviewed
CVE-2024-42145
was published
Jul 30, 2024
IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that...
Moderate
Unreviewed
CVE-2023-47717
was published
May 16, 2024
A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch...
Moderate
Unreviewed
CVE-2023-5625
was published
Nov 1, 2023
In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper...
Moderate
Unreviewed
CVE-2018-9412
was published
Nov 20, 2024
ProTip!
Advisories are also available from the
GraphQL API