Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,238
Erlang
31
GitHub Actions
21
Go
2,005
Maven
5,000+
npm
3,716
NuGet
661
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

832 advisories

Loading
In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to... High Unreviewed
CVE-2022-41860 was published Jan 17, 2023
NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2. High Unreviewed
CVE-2022-0890 was published Mar 11, 2022
An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort... High Unreviewed
CVE-2021-42577 was published Mar 13, 2022
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash ... High Unreviewed
CVE-2021-44224 was published Feb 8, 2022
A null pointer dereference in src/amf/namf-handler.c in Open5GS 2.3.6 and earlier allows remote... High Unreviewed
CVE-2021-44108 was published Apr 6, 2022
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000.... High Unreviewed
CVE-2021-44494 was published Apr 16, 2022
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack... High Unreviewed
CVE-2021-44506 was published Apr 16, 2022
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack... High Unreviewed
CVE-2021-44507 was published Apr 16, 2022
An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in get_cmdln_options(... High Unreviewed
CVE-2022-1341 was published Apr 19, 2022
An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to... High Unreviewed
CVE-2021-44487 was published Apr 16, 2022
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using... High Unreviewed
CVE-2021-44498 was published Apr 16, 2022
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using... High Unreviewed
CVE-2021-44505 was published Apr 16, 2022
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack... High Unreviewed
CVE-2021-44508 was published Apr 16, 2022
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol... High Unreviewed
CVE-2022-20682 was published Apr 16, 2022
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This... High Unreviewed
CVE-2022-1382 was published Apr 19, 2022
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000.... High Unreviewed
CVE-2021-44495 was published Apr 16, 2022
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000.... High Unreviewed
CVE-2021-44492 was published Apr 16, 2022
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using... High Unreviewed
CVE-2021-44501 was published Apr 16, 2022
An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to... High Unreviewed
CVE-2021-44484 was published Apr 16, 2022
An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in trip_gen... High Unreviewed
CVE-2021-44485 was published Apr 16, 2022
It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd... High Unreviewed
CVE-2010-4816 was published Apr 21, 2022
An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing... High Unreviewed
CVE-2017-2893 was published May 13, 2022
An exploitable denial-of-service vulnerability exists in the thumbnail display functionality of... High Unreviewed
CVE-2018-4024 was published May 24, 2022
Wind River VxWorks 6.9 and vx7 has an array index error in the IGMPv3 client component. There is... High Unreviewed
CVE-2019-12259 was published May 24, 2022
Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache... High Unreviewed
CVE-2021-34798 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database