Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,467
Erlang
33
GitHub Actions
23
Go
2,172
Maven
5,000+
npm
3,832
NuGet
696
pip
3,508
Pub
12
RubyGems
910
Rust
907
Swift
38
Unreviewed advisories
All unreviewed
5,000+

488 advisories

Loading
Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds... Moderate Unreviewed
CVE-2024-6600 was published Jul 9, 2024
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).... Moderate Unreviewed
CVE-2024-39876 was published Jul 9, 2024
In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix vmalloc... Moderate Unreviewed
CVE-2024-39474 was published Jul 5, 2024
In the Linux kernel, the following vulnerability has been resolved: mmc: davinci: Don't strip... Moderate Unreviewed
CVE-2024-39484 was published Jul 5, 2024
In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Do not... Moderate Unreviewed
CVE-2024-39478 was published Jul 5, 2024
In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length... Moderate Unreviewed
CVE-2024-39482 was published Jul 5, 2024
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: do not call... Moderate Unreviewed
CVE-2024-39477 was published Jul 5, 2024
In the Linux kernel, the following vulnerability has been resolved: xfs: fix log recovery buffer... Moderate Unreviewed
CVE-2024-39472 was published Jul 5, 2024
IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, and 9.3 CD is vulnerable to a denial of service attack... Moderate Unreviewed
CVE-2024-35116 was published Jun 29, 2024
IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD, in certain configurations, is vulnerable to... Moderate Unreviewed
CVE-2024-31919 was published Jun 28, 2024
An issue the background management system of Shanxi Internet Chuangxiang Technology Co., Ltd v1.0... Moderate Unreviewed
CVE-2024-37681 was published Jun 24, 2024
CrateDB has a Client initialized Session-Renegotiation DoS Moderate
CVE-2024-37309 was published for io.crate:crate (Maven) Jun 13, 2024
BaurzhanSakhariev
gqlparser denial of service vulnerability via the parserDirectives function Moderate
CVE-2023-49559 was published for github.com/vektah/gqlparser (Go) Jun 12, 2024
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is... Moderate Unreviewed
CVE-2024-31881 was published Jun 12, 2024
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is... Moderate Unreviewed
CVE-2024-28762 was published Jun 12, 2024
TYPO3 Denial of Service in Online Media Asset Handling Moderate
GHSA-f3wf-q4fj-3gxf was published for typo3/cms (Composer) Jun 7, 2024
Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause... Moderate Unreviewed
CVE-2024-34055 was published Jun 5, 2024
is_closing_session() allows users to fill up apport.log Moderate Unreviewed
CVE-2022-28654 was published Jun 5, 2024
is_closing_session() allows users to consume RAM in the Apport process Moderate Unreviewed
CVE-2022-28656 was published Jun 5, 2024
TYPO3 Denial of Service in Online Media Asset Handling Moderate
GHSA-29m4-mx89-3mjg was published for typo3/cms-core (Composer) May 30, 2024
Denial of service of Minder Server from maliciously crafted GitHub attestations Moderate
CVE-2024-35238 was published for github.com/stacklok/minder (Go) May 28, 2024
AdamKorcz DavidKorczynski
An issue has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11... Moderate Unreviewed
CVE-2024-2874 was published May 23, 2024
OpenLiteSpeed before 1.8.1 mishandles chunked encoding. Moderate Unreviewed
CVE-2024-31617 was published May 22, 2024
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition... Moderate Unreviewed
CVE-2024-35969 was published May 20, 2024
IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that... Moderate Unreviewed
CVE-2023-47717 was published May 16, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database