GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,134
Erlang
29
GitHub Actions
19
Go
1,941
Maven
5,000+
npm
3,681
NuGet
650
pip
3,298
Pub
11
RubyGems
877
Rust
830
Swift
35
Unreviewed advisories
All unreviewed
5,000+
121 advisories
Filter by severity
user/group information can be corrupted across storing in fsimage and reading back from fsimage
High
CVE-2018-11768
was published
for
org.apache.hadoop:hadoop-main
(Maven)
Nov 20, 2019
Improper Restriction of Operations within the Bounds of a Memory Buffer in akka-http-core
High
CVE-2017-1000118
was published
for
com.typesafe.akka:akka-http-core_2.11
(Maven)
Oct 22, 2018
Denial of Service in ethereumjs-vm
High
CVE-2018-19183
was published
for
ethereumjs-vm
(npm)
Nov 21, 2018
Stack Overflow in Apache Mesos
High
CVE-2018-11793
was published
for
org.apache.mesos:mesos
(Maven)
Mar 6, 2019
Data race in ruspiro-singleton
High
CVE-2020-36435
was published
for
ruspiro-singleton
(Rust)
Aug 25, 2021
Remote code execution in ASP.NET Core
High
CVE-2020-0603
was published
for
Microsoft.AspNetCore.All
(NuGet)
May 24, 2022
Denial of Service in Netty
High
CVE-2020-11612
was published
for
io.netty:netty-handler
(Maven)
Jun 15, 2020
Segfault and data corruption in tensorflow-lite
High
CVE-2020-15207
was published
for
tensorflow
(pip)
Sep 25, 2020
Heap buffer overflow in Tensorflow
High
CVE-2020-15196
was published
for
tensorflow
(pip)
Sep 25, 2020
Heap buffer overflow in Tensorflow
High
CVE-2020-15195
was published
for
tensorflow
(pip)
Sep 25, 2020
Inappropriate implementation in V8 in CefSharp
High
CVE-2020-16013
was published
for
CefSharp.Common
(NuGet)
Nov 27, 2020
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat
High
CVE-2020-13934
was published
for
org.apache.tomcat:tomcat
(Maven)
Feb 8, 2022
Remote code execution in ChakraCore
High
CVE-2020-1057
was published
for
Microsoft.ChakraCore
(NuGet)
Aug 2, 2021
Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
High
CVE-2017-12862
was published
for
opencv-contrib-python
(pip)
Oct 12, 2021
Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
High
CVE-2017-12601
was published
for
opencv-contrib-python
(pip)
Oct 12, 2021
Memory corruption when returning a literal struct with a private call inside of it
High
CVE-2021-41121
was published
for
vyper
(pip)
Oct 12, 2021
go-codec-dagpb vulnerable to panic when decoding invalid blocks
High
CVE-2022-2584
was published
for
github.com/ipld/go-codec-dagpb
(Go)
Dec 28, 2022
Out of bounds memory access in github.com/open-policy-agent/opa
High
CVE-2022-28946
was published
for
github.com/open-policy-agent/opa
(Go)
May 20, 2022
ProTip!
Advisories are also available from the
GraphQL API