Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,711
Maven
5,000+
npm
4,328
NuGet
761
pip
4,105
Pub
12
RubyGems
958
Rust
1,065
Swift
45
Unreviewed advisories
All unreviewed
5,000+

11,625 advisories

Loading
Python Facebook Thrift servers would not error upon receiving messages with containers of fields... High Unreviewed
CVE-2019-3558 was published May 24, 2022
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is... Moderate Unreviewed
CVE-2019-4101 was published May 24, 2022
Insufficient data validation in developer tools in Google Chrome on OS X prior to 74.0.3729.108... High Unreviewed
CVE-2019-5819 was published May 24, 2022
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 could allow a remote attacker to... Moderate Unreviewed
CVE-2019-4217 was published May 24, 2022
In libvpx, there is a possible resource exhaustion due to improper input validation. This could... High Unreviewed
CVE-2019-9371 was published May 24, 2022
Safe Software FME Server v2022.0.1.1 and below does not employ server-side validation. High Unreviewed
CVE-2022-38341 was published Sep 20, 2022
IBM MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, and 9.1.0.0 through 9.1.1 is vulnerable... High Unreviewed
CVE-2019-4055 was published May 24, 2022
Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution... High Unreviewed
CVE-2019-3719 was published May 24, 2022
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of... High Unreviewed
CVE-2018-5391 was published May 14, 2022
Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75... Moderate Unreviewed
CVE-2019-5794 was published May 24, 2022
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All... High Unreviewed
CVE-2022-29872 was published May 21, 2022
C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers... High Unreviewed
CVE-2019-3552 was published May 24, 2022
Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving... High Unreviewed
CVE-2019-3565 was published May 24, 2022
Improper input validation vulnerability in Mangboard commerce package could lead to occur for... High Unreviewed
CVE-2021-26631 was published May 20, 2022
There is a code execution vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1... High Unreviewed
CVE-2019-5242 was published May 24, 2022
IBM Cloud Private Kubernetes API server 2.1.0, 3.1.0, 3.1.1, and 3.1.2 can be used as an HTTP... Moderate Unreviewed
CVE-2019-4119 was published May 24, 2022
There is a DoS vulnerability in RTSP module of Leland-AL00A Huawei smart phones versions earlier... Moderate Unreviewed
CVE-2019-5284 was published May 24, 2022
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious... High Unreviewed
CVE-2022-32492 was published Oct 11, 2022
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script,... Critical Unreviewed
CVE-2019-9850 was published May 24, 2022
The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5,... Moderate Unreviewed
CVE-2010-3704 was published May 17, 2022
Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via... High Unreviewed
CVE-2008-6559 was published May 17, 2022
MyBB (aka MyBulletinBoard) 1.4.2 does not properly handle an uploaded file with a nonstandard... Moderate Unreviewed
CVE-2008-4930 was published May 17, 2022
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to... High Unreviewed
CVE-2008-4641 was published May 17, 2022
UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010,... High Unreviewed
CVE-2010-2075 was published May 17, 2022
mod_ibm_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11,... Moderate Unreviewed
CVE-2010-2327 was published May 17, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database