GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,134
Erlang
29
GitHub Actions
19
Go
1,941
Maven
5,000+
npm
3,681
NuGet
650
pip
3,298
Pub
11
RubyGems
877
Rust
830
Swift
35
Unreviewed advisories
All unreviewed
5,000+
8,394 advisories
Filter by severity
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...
High
Unreviewed
CVE-2024-27857
was published
Jun 10, 2024
The issue was addressed with improved bounds checks. This issue is fixed in tvOS 17.5, visionOS 1...
High
Unreviewed
CVE-2024-27851
was published
Jun 10, 2024
Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2024-5306
was published
Jun 6, 2024
Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC
High
CVE-2024-36129
was published
for
go.opentelemetry.io/collector/config/configgrpc
(Go)
Jun 5, 2024
Improper buffer restrictions in PlatformPfrDxe driver in UEFI firmware for some Intel(R) Server...
High
Unreviewed
CVE-2024-23980
was published
May 16, 2024
A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V27...
High
Unreviewed
CVE-2024-32058
was published
May 14, 2024
Kofax Power PDF J2K File Parsing Memory Corruption Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2023-51608
was published
May 3, 2024
Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability....
High
Unreviewed
CVE-2023-50187
was published
May 3, 2024
PDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2023-42078
was published
May 3, 2024
Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2023-42037
was published
May 3, 2024
PDF-XChange Editor PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2023-42043
was published
May 3, 2024
Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2023-42036
was published
May 3, 2024
PDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2023-42047
was published
May 3, 2024
PDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2023-39486
was published
May 3, 2024
Kofax Power PDF GIF File Parsing Memory Corruption Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2023-38082
was published
May 3, 2024
Kofax Power PDF PCX File Parsing Memory Corruption Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2023-37333
was published
May 3, 2024
Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2023-38084
was published
May 3, 2024
Kofax Power PDF PNG File Parsing Memory Corruption Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2023-37332
was published
May 3, 2024
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/gem: Really move...
High
Unreviewed
CVE-2022-48662
was published
Apr 28, 2024
In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scmi: Harden...
High
Unreviewed
CVE-2022-48655
was published
Apr 28, 2024
Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the component...
High
Unreviewed
CVE-2024-33258
was published
Apr 26, 2024
A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of...
High
Unreviewed
CVE-2024-22391
was published
Apr 25, 2024
An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon...
High
Unreviewed
CVE-2024-22373
was published
Apr 25, 2024
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered...
High
Unreviewed
CVE-2023-4235
was published
Apr 18, 2024
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered...
High
Unreviewed
CVE-2023-4233
was published
Apr 18, 2024
ProTip!
Advisories are also available from the
GraphQL API