Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

108 advisories

Loading
smallvec creates uninitialized value of any type Moderate
GHSA-66p5-j55p-32r9 was published for smallvec (Rust) Aug 25, 2021
A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization... Moderate Unreviewed
CVE-2021-44003 was published Dec 15, 2021
This vulnerability allows local attackers to disclose sensitive information on affected... Moderate Unreviewed
CVE-2022-42432 was published Mar 29, 2023
When using gdImageCreateFromXbm() function of gd extension in versions 7.1.x below 7.1.30, 7.2.x... Moderate Unreviewed
CVE-2019-11038 was published May 24, 2022
In OffloadAMRWriter, a scalar field is not initialized so will contain an arbitrary value left... Moderate Unreviewed
CVE-2024-32625 was published Apr 16, 2024
An uninitialized memory use vulnerability exists in Tinyproxy 1.11.1 while parsing HTTP requests.... Moderate Unreviewed
CVE-2023-40533 was published May 1, 2024
Vulnerability of variables not being initialized in the notification module Impact: Successful... Moderate Unreviewed
CVE-2024-56446 was published Jan 8, 2025
In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could... Moderate Unreviewed
CVE-2025-20638 was published Feb 3, 2025
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions).... Moderate Unreviewed
CVE-2025-40575 was published May 13, 2025
WOLFBOX Level 2 EV Charger BLE Encryption Keys Uninitialized Variable Authentication Bypass... Moderate Unreviewed
CVE-2025-5749 was published Jun 6, 2025
The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended... Moderate Unreviewed
CVE-2025-26383 was published Jun 11, 2025
In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized... Moderate Unreviewed
CVE-2025-26448 was published Sep 5, 2025
Dragonfly incorrectly handles a task structure’s usedTrac field Moderate
CVE-2025-59348 was published for d7y.io/dragonfly/v2 (Go) Sep 17, 2025
gaius-qi Credited to gaius-qi
On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the... Moderate Unreviewed
CVE-2025-8027 was published Jul 22, 2025
Uninitialized memory in the JavaScript Engine component. This vulnerability affects Firefox < 142... Moderate Unreviewed
CVE-2025-9181 was published Aug 19, 2025
IBM Security Verify Access Appliance 10.0.0 through 10.0.7 uses uninitialized variables when... Moderate Unreviewed
CVE-2024-31874 was published Apr 10, 2024
An information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther... Moderate Unreviewed
CVE-2023-31192 was published Oct 12, 2023
In display, there is a possible escalation of privilege due to improper input validation. This... Moderate Unreviewed
CVE-2025-20771 was published Dec 2, 2025
In display, there is a possible memory corruption due to uninitialized data. This could lead to... Moderate Unreviewed
CVE-2025-20784 was published Jan 6, 2026
Panda3D versions up to and including 1.10.16 deploy-stub contains a denial of service... Moderate Unreviewed
CVE-2026-22188 was published Jan 7, 2026
Use of uninitialized variable for some TDX Module before version tdx1.5 within Ring 0: Hypervisor... Moderate Unreviewed
CVE-2025-32467 was published Feb 10, 2026
Improper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can allow... Moderate Unreviewed
CVE-2025-29952 was published Feb 10, 2026
Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker... Moderate Unreviewed
CVE-2026-5888 was published Apr 9, 2026
Uninitialized Use in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to... Moderate Unreviewed
CVE-2026-7924 was published May 6, 2026
Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who... Moderate Unreviewed
CVE-2026-7955 was published May 6, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database