Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

128 advisories

Loading
In the Linux kernel, the following vulnerability has been resolved: mm: call the... High Unreviewed
CVE-2024-47745 was published Oct 21, 2024
In Gradio, the `enable_monitoring` flag set to `False` does not disable monitoring Low
CVE-2024-47168 was published for gradio (pip) Oct 10, 2024
ahpaleus Credited to ahpaleus and Vasco-jofra Vasco-jofra Vasco-jofra
btcd did not correctly re-implement Bitcoin Core's "FindAndDelete()" functionality High
CVE-2024-38365 was published for github.com/btcsuite/btcd (Go) Oct 10, 2024
darosior Credited to darosior and dergoegge dergoegge dergoegge
wasmtime has a runtime crash when combining tail calls with trapping imports Moderate
CVE-2024-47763 was published for wasmtime (Rust) Oct 9, 2024
alexcrichton Credited to alexcrichton and fitzgen fitzgen fitzgen
A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access ... High Unreviewed
CVE-2024-20480 was published Sep 25, 2024
Denial of service in quinn-proto when using `Endpoint::retry()` High
CVE-2024-45311 was published for quinn-proto (Rust) Sep 3, 2024
finnbear Credited to finnbear and BiagioFesta BiagioFesta BiagioFesta
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the... Unknown Unreviewed
CVE-2024-5659 was published Jun 14, 2024
there is a possible way to bypass due to a logic error in the code. This could lead to local... High Unreviewed
CVE-2024-32896 was published Jun 13, 2024
Keycloak's improper input validation allows using email as username Low
CVE-2021-3754 was published for org.keycloak:keycloak-services (Maven) Jun 12, 2024
Chetven Credited to Chetven
Contract balance not updating correctly after interchain transaction High
CVE-2024-37153 was published for github.com/evmos/evmos/v10 (Go) Jun 6, 2024
Vvaradinov Credited to Vvaradinov and EvmosDAO EvmosDAO EvmosDAO
In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration... Moderate Unreviewed
CVE-2023-52781 was published May 21, 2024
In the Linux kernel, the following vulnerability has been resolved: net: USB: Fix wrong... Moderate Unreviewed
CVE-2023-52742 was published May 21, 2024
Requests `Session` object does not verify requests after making first request with verify=False Moderate
CVE-2024-35195 was published for requests (pip) May 20, 2024
mikeassel Credited to mikeassel, sigmavirus24, nateprewitt, and liiiiiiaduarte34-art sigmavirus24 sigmavirus24
nateprewitt nateprewitt liiiiiiaduarte34-art liiiiiiaduarte34-art
Tor Arti's STUB circuits incorrectly have a length of 2 High
CVE-2024-35312 was published for arti (Rust) May 18, 2024
eZ Platform Rules to disable executable access are ignored on Platform.sh (eZ Cloud) Moderate
GHSA-6xch-2vxx-5pvr was published for ezsystems/ezplatform (Composer) May 15, 2024
An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a... Moderate Unreviewed
CVE-2024-33431 was published May 1, 2024
A vulnerability classified as critical has been found in SourceCodester Computer Laboratory... High Unreviewed
CVE-2024-3376 was published Apr 6, 2024
Incorrect placement of a preprocessor directive in source code results in logic that doesn't... Moderate Unreviewed
CVE-2023-46840 was published Mar 20, 2024
A malicious insider exploiting this vulnerability can circumvent existing security controls put... Moderate Unreviewed
CVE-2024-0313 was published Mar 14, 2024
Insufficient authentication flow in Checkmk before 2.2.0p17, 2.1.0p37 and 2.0.0p39 allows... High Unreviewed
CVE-2023-31211 was published Jan 12, 2024
OpenZeppelin Contracts and Contracts Upgradeable duplicated execution of subcalls in v4.9.4 Moderate
CVE-2023-49798 was published for @openzeppelin/contracts (npm) Dec 12, 2023
Always incorrect control flow in github.com/mojocn/base64Captcha Moderate
CVE-2023-45292 was published for github.com/mojocn/base64Captcha (Go) Dec 12, 2023
Fiber unauthorized access vulnerability in `ctx.IsFromLocal()` Moderate
CVE-2023-41338 was published for github.com/gofiber/fiber (Go) Sep 8, 2023
schicho Credited to schicho, gaby, efectn, jozsefsallai, and ReneWerner87 gaby gaby
efectn efectn jozsefsallai jozsefsallai ReneWerner87 ReneWerner87
Electron's Content-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled High
CVE-2023-23623 was published for electron (npm) Sep 6, 2023
andreasdj Credited to andreasdj
Trigger `beforeFind` not invoked in internal query pipeline when fetching pointer High
CVE-2023-41058 was published for parse-server (npm) Sep 4, 2023
Moumouls Credited to Moumouls and mtrezza mtrezza mtrezza
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database