GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,133
Erlang
29
GitHub Actions
19
Go
1,940
Maven
5,000+
npm
3,677
NuGet
645
pip
3,295
Pub
11
RubyGems
877
Rust
830
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
278 advisories
Filter by severity
A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in the Linux kernel. A KVM...
Moderate
Unreviewed
CVE-2023-4155
was published
Sep 13, 2023
A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated,...
High
Unreviewed
CVE-2023-20135
was published
Sep 13, 2023
BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU...
High
Unreviewed
CVE-2023-27470
was published
Sep 11, 2023
Unity Parsec before 8 has a TOCTOU race condition that permits local attackers to escalate...
High
Unreviewed
CVE-2023-37250
was published
Aug 20, 2023
Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated...
Moderate
Unreviewed
CVE-2023-28075
was published
Aug 16, 2023
The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in...
High
Unreviewed
CVE-2023-28576
was published
Aug 8, 2023
In thermal, there is a possible use after free due to a race condition. This could lead to local...
Moderate
Unreviewed
CVE-2023-20787
was published
Aug 7, 2023
In thermal, there is a possible use after free due to a race condition. This could lead to local...
Moderate
Unreviewed
CVE-2023-20788
was published
Aug 7, 2023
In audio, there is a possible out of bounds write due to a missing bounds check. This could lead...
Moderate
Unreviewed
CVE-2023-20785
was published
Aug 7, 2023
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.9 before 16...
Critical
Unreviewed
CVE-2023-4008
was published
Aug 3, 2023
External service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use...
Low
Unreviewed
CVE-2023-26438
was published
Aug 2, 2023
IBM Spectrum Protect 8.1.0.0 through 8.1.17.0 could allow a local user to cause a denial of...
Moderate
Unreviewed
CVE-2023-33832
was published
Jul 19, 2023
Microsoft Outlook Security Feature Bypass Vulnerability
High
Unreviewed
CVE-2023-35311
was published
Jul 11, 2023
Multiple vulnerabilities including an incorrect permission assignment for critical resource [CWE...
High
Unreviewed
CVE-2022-43946
was published
Jul 6, 2023
A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP...
High
Unreviewed
CVE-2023-26299
was published
Jun 30, 2023
An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5,...
Moderate
Unreviewed
CVE-2022-4143
was published
Jun 28, 2023
A time-of-check to time-of-use issue exists in io_uring subsystem's IORING_OP_CLOSE operation in...
High
Unreviewed
CVE-2023-1295
was published
Jun 28, 2023
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service...
High
Unreviewed
CVE-2023-32555
was published
Jun 27, 2023
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service...
High
Unreviewed
CVE-2023-32554
was published
Jun 27, 2023
The Netskope client service (prior to R96) on Windows runs as NT AUTHORITY\SYSTEM which writes...
High
Unreviewed
CVE-2022-4149
was published
Jun 15, 2023
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products,...
High
Unreviewed
CVE-2022-31642
was published
Jun 14, 2023
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products,...
High
Unreviewed
CVE-2022-31640
was published
Jun 14, 2023
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products,...
High
Unreviewed
CVE-2022-31641
was published
Jun 14, 2023
Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS...
High
Unreviewed
CVE-2022-31636
was published
Jun 13, 2023
Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS...
High
Unreviewed
CVE-2022-31637
was published
Jun 13, 2023
ProTip!
Advisories are also available from the
GraphQL API