Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,238
Erlang
31
GitHub Actions
21
Go
2,005
Maven
5,000+
npm
3,716
NuGet
661
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,339 advisories

Loading
Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing... High Unreviewed
CVE-2023-38653 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing... High Unreviewed
CVE-2023-38650 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of... High Unreviewed
CVE-2023-39275 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of... High Unreviewed
CVE-2023-39272 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of... High Unreviewed
CVE-2023-39274 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of... High Unreviewed
CVE-2023-39270 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of... High Unreviewed
CVE-2023-38618 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of... High Unreviewed
CVE-2023-38622 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of... High Unreviewed
CVE-2023-38619 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of... High Unreviewed
CVE-2023-38621 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table... High Unreviewed
CVE-2023-36915 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table... High Unreviewed
CVE-2023-36916 was published Jan 8, 2024
An integer overflow vulnerability exists in the fstReaderIterBlocks2 temp_signal_value_buf... High Unreviewed
CVE-2023-36864 was published Jan 8, 2024
An integer overflow vulnerability exists in the FST fstReaderIterBlocks2 vesc allocation... High Unreviewed
CVE-2023-35992 was published Jan 8, 2024
An integer overflow vulnerability exists in the LXT2 zlib block allocation functionality of... High Unreviewed
CVE-2023-35989 was published Jan 8, 2024
An integer overflow vulnerability exists in the VZT longest_len value allocation functionality of... High Unreviewed
CVE-2023-35004 was published Jan 8, 2024
An integer overflow vulnerability exists in the FST_BL_GEOM parsing maxhandle functionality of... High Unreviewed
CVE-2023-32650 was published Jan 8, 2024
An integer overflow vulnerability exists in the fstReaderIterBlocks2 time_table tsec_nitems... High Unreviewed
CVE-2023-35128 was published Jan 8, 2024
An integer overflow vulnerability exists in the LXT2 lxt2_rd_trace value elements allocation... High Unreviewed
CVE-2023-35057 was published Jan 8, 2024
Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow... High Unreviewed
CVE-2023-24609 was published Dec 22, 2023
Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC... High Unreviewed
CVE-2023-43826 was published Dec 19, 2023
A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or... High Unreviewed
CVE-2023-6478 was published Dec 13, 2023
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code... High Unreviewed
CVE-2023-5869 was published Dec 10, 2023
In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase... High Unreviewed
CVE-2023-48409 was published Dec 8, 2023
Memory corruption while using the UIM diag command to get the operators name. High Unreviewed
CVE-2023-33018 was published Dec 5, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database