Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,133
Erlang
29
GitHub Actions
19
Go
1,940
Maven
5,000+
npm
3,677
NuGet
645
pip
3,295
Pub
11
RubyGems
877
Rust
830
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

429 advisories

Loading
A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of... Critical Unreviewed
CVE-2021-21811 was published May 24, 2022
ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated... Moderate Unreviewed
CVE-2019-16712 was published May 24, 2022
ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in... Moderate Unreviewed
CVE-2019-16713 was published May 24, 2022
ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage. Moderate Unreviewed
CVE-2019-16709 was published May 24, 2022
ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c. Moderate Unreviewed
CVE-2019-16711 was published May 24, 2022
ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage. Moderate Unreviewed
CVE-2019-16708 was published May 24, 2022
ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in... Moderate Unreviewed
CVE-2019-16710 was published May 24, 2022
In broadband environments, including but not limited to Enhanced Subscriber Management, (CHAP,... Moderate Unreviewed
CVE-2021-31378 was published May 24, 2022
rudp v0.6 was discovered to contain a memory leak in the component main.c. High Unreviewed
CVE-2020-20665 was published May 24, 2022
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) support for the AutoReconnect... High Unreviewed
CVE-2021-1620 was published May 24, 2022
Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of... High Unreviewed
CVE-2021-34581 was published May 24, 2022
A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ... High Unreviewed
CVE-2021-1523 was published May 24, 2022
Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files. High Unreviewed
CVE-2021-39282 was published May 24, 2022
Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object,... Moderate Unreviewed
CVE-2021-29982 was published May 24, 2022
Dell EMC NetWorker, 19.4 or older, contain an uncontrolled resource consumption flaw in its API... Moderate Unreviewed
CVE-2021-21600 was published May 24, 2022
In Phoenix Contact FL COMSERVER UNI in versions < 2.40 a invalid Modbus exception response can... High Unreviewed
CVE-2021-21002 was published May 24, 2022
Missing release of resource after effective lifetime in an API for the Intel(R) Security Library... Moderate Unreviewed
CVE-2021-0132 was published May 24, 2022
An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists.... Moderate Unreviewed
CVE-2021-30002 was published May 24, 2022
A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local... Moderate Unreviewed
CVE-2020-9146 was published May 24, 2022
Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack... High Unreviewed
CVE-2021-22883 was published May 24, 2022
Any git operation is passed through Jetty and a session is created. No expiry is set for the... High Unreviewed
CVE-2021-22553 was published May 24, 2022
On Juniper Networks Junos EX series, QFX Series and SRX branch series devices, a memory leak... Moderate Unreviewed
CVE-2021-0215 was published May 24, 2022
smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to... High Unreviewed
CVE-2020-35679 was published May 24, 2022
In version 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2... Moderate Unreviewed
CVE-2020-27725 was published May 24, 2022
Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python... Low Unreviewed
CVE-2020-27351 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database