GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,239
Erlang
31
GitHub Actions
21
Go
2,007
Maven
5,000+
npm
3,716
NuGet
662
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+
68 advisories
Filter by severity
Twisted SSH client and server deny of service during SSH handshake.
High
CVE-2022-21716
was published
for
twisted
(pip)
Mar 3, 2022
PaddlePaddle heap buffer overflow in paddle.repeat_interleave
High
CVE-2023-52309
was published
for
PaddlePaddle
(pip)
Jan 3, 2024
PaddlePaddle stack overflow in paddle.linalg.lu_unpack
High
CVE-2023-52307
was published
for
PaddlePaddle
(pip)
Jan 3, 2024
PaddlePaddle stack overflow in paddle.searchsorted
High
CVE-2023-52304
was published
for
PaddlePaddle
(pip)
Jan 3, 2024
Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord`
High
CVE-2021-37650
was published
for
tensorflow
(pip)
Aug 25, 2021
Heap buffer overflow in `BandedTriangularSolve`
Low
CVE-2021-29612
was published
for
tensorflow
(pip)
May 21, 2021
Heap buffer overflow in `Transpose`
Moderate
CVE-2021-41216
was published
for
tensorflow
(pip)
Nov 10, 2021
Access to invalid memory during shape inference in `Cudnn*` ops
High
CVE-2021-41221
was published
for
tensorflow
(pip)
Nov 10, 2021
Overflow/denial of service in `tf.raw_ops.ReverseSequence`
Low
CVE-2021-29575
was published
for
tensorflow
(pip)
May 21, 2021
Heap buffer overflow in `Conv2DBackpropFilter`
Low
CVE-2021-29540
was published
for
tensorflow
(pip)
May 21, 2021
Heap buffer overflow in `Conv3DBackprop*`
Low
CVE-2021-29520
was published
for
tensorflow
(pip)
May 21, 2021
Heap buffer overflow in `RaggedBinCount`
Low
CVE-2021-29512
was published
for
tensorflow
(pip)
May 21, 2021
Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters
Moderate
CVE-2024-45230
was published
for
Django
(pip)
Oct 8, 2024
concat built-in can corrupt memory in vyper
High
CVE-2024-22419
was published
for
vyper
(pip)
Jan 19, 2024
Buffer Copy without Checking Size of Input in Pillow
Critical
CVE-2020-5311
was published
for
pillow
(pip)
May 24, 2022
PCX P mode buffer overflow in Pillow
Critical
CVE-2020-5312
was published
for
Pillow
(pip)
Nov 3, 2021
Integer overflow in the bundled Brotli C library
Moderate
CVE-2020-8927
was published
for
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm
(NuGet)
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API