Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,941
Erlang
29
GitHub Actions
16
Go
1,722
Maven
4,952
npm
3,481
NuGet
605
pip
3,049
Pub
10
RubyGems
832
Rust
778
Swift
34
Unreviewed advisories
All unreviewed
5,000+

160 advisories

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a implements an incorrect exception type when... Moderate Unreviewed
CVE-2022-34637 was published Jul 19, 2022
CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit... Moderate Unreviewed
CVE-2022-34636 was published Jul 19, 2022
RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 implements the incorrect exception... Moderate Unreviewed
CVE-2022-34643 was published Jul 19, 2022
Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker... Moderate Unreviewed
CVE-2022-1965 was published Jun 25, 2022
An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an... Moderate Unreviewed
CVE-2022-32990 was published Jun 25, 2022
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers... Moderate Unreviewed
CVE-2022-30725 was published Jun 8, 2022
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers... Moderate Unreviewed
CVE-2022-30723 was published Jun 8, 2022
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers... Moderate Unreviewed
CVE-2022-30724 was published Jun 8, 2022
Unprotected broadcast in sendIntentForToastDumpLog in DisplayToast prior to SMR Jun-2022 Release... Moderate Unreviewed
CVE-2022-30716 was published Jun 8, 2022
Improper handling of insufficient permissions vulnerability in addAppPackageNameToAllowList in... Moderate Unreviewed
CVE-2022-30727 was published Jun 8, 2022
Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory... Moderate Unreviewed
CVE-2020-26195 was published May 24, 2022
** DISPUTED ** Styra Open Policy Agent (OPA) Gatekeeper through 3.7.0 mishandles concurrency,... Moderate Unreviewed
CVE-2021-43979 was published May 24, 2022
A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive... Moderate Unreviewed
CVE-2021-34787 was published May 24, 2022
A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved... Moderate Unreviewed
CVE-2021-0297 was published May 24, 2022
Assuming a shell privilege is gained, an improper exception handling for... Moderate Unreviewed
CVE-2021-25474 was published May 24, 2022
Assuming a shell privilege is gained, an improper exception handling for... Moderate Unreviewed
CVE-2021-25473 was published May 24, 2022
Certain Federal Office of Information Technology Systems and Telecommunication FOITT products are... Moderate Unreviewed
CVE-2021-37786 was published May 24, 2022
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM... Moderate Unreviewed
CVE-2021-37175 was published May 24, 2022
Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x improperly handle an exceptional condition. A... Moderate Unreviewed
CVE-2021-21592 was published May 24, 2022
Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before... Moderate Unreviewed
CVE-2021-0003 was published May 24, 2022
Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and... Moderate Unreviewed
CVE-2021-0007 was published May 24, 2022
Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and... Moderate Unreviewed
CVE-2021-0005 was published May 24, 2022
Improper conditions check in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and... Moderate Unreviewed
CVE-2021-0006 was published May 24, 2022
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it... Moderate Unreviewed
CVE-2021-1102 was published May 24, 2022
An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers... Moderate Unreviewed
CVE-2020-19473 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API