GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
3,825
Erlang
29
GitHub Actions
16
Go
1,715
Maven
4,950
npm
3,479
NuGet
605
pip
3,018
Pub
10
RubyGems
832
Rust
776
Swift
34
Unreviewed advisories
All unreviewed
5,000+
179 advisories
Filter by severity
A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an...
High
Unreviewed
CVE-2019-1795
was published
May 24, 2022
A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an...
High
Unreviewed
CVE-2019-1779
was published
May 24, 2022
Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to...
Critical
Unreviewed
CVE-2017-14591
was published
May 17, 2022
kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire HD(3rd)...
High
Unreviewed
CVE-2018-11025
was published
May 14, 2022
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd...
High
Unreviewed
CVE-2018-11023
was published
May 14, 2022
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd)...
High
Unreviewed
CVE-2018-11022
was published
May 14, 2022
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd...
High
Unreviewed
CVE-2018-11024
was published
May 14, 2022
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd)...
High
Unreviewed
CVE-2018-11019
was published
May 14, 2022
kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD...
High
Unreviewed
CVE-2018-11021
was published
May 14, 2022
kernel/omap/drivers/rpmsg/rpmsg_omx.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire...
Moderate
Unreviewed
CVE-2018-11020
was published
May 14, 2022
Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will...
High
Unreviewed
CVE-2016-1000222
was published
May 14, 2022
There was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial...
Critical
Unreviewed
CVE-2018-13385
was published
May 13, 2022
There was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2...
High
Unreviewed
CVE-2018-20234
was published
May 13, 2022
mIRC before 7.55 allows remote command execution by using argument injection through custom URI...
High
Unreviewed
CVE-2019-6453
was published
May 13, 2022
A tampering vulnerability exists when Microsoft browsers do not properly validate input under...
Moderate
Unreviewed
CVE-2019-0764
was published
May 13, 2022
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x...
Critical
Unreviewed
CVE-2018-17456
was published
May 13, 2022
There was an argument injection vulnerability in Sourcetree for Windows via filenames in...
High
Unreviewed
CVE-2018-13386
was published
May 13, 2022
lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program...
Critical
Unreviewed
CVE-2018-10992
was published
May 13, 2022
A vulnerability in the configuration and management database of the Cisco SD-WAN Solution could...
High
Unreviewed
CVE-2018-0345
was published
May 13, 2022
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker...
High
Unreviewed
CVE-2019-1609
was published
May 13, 2022
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker...
High
Unreviewed
CVE-2019-1606
was published
May 13, 2022
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker...
High
Unreviewed
CVE-2019-1607
was published
May 13, 2022
A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an...
High
Unreviewed
CVE-2019-1611
was published
May 13, 2022
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker...
High
Unreviewed
CVE-2019-1608
was published
May 13, 2022
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker...
High
Unreviewed
CVE-2019-1610
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API