Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,455
Maven
5,000+
npm
5,000+
NuGet
1,090
pip
5,000+
Pub
13
RubyGems
1,135
Rust
1,509
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,531 advisories

Loading
An issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it is possible to... High Unreviewed
CVE-2022-26498 was published Apr 16, 2022
A vulnerability in the NETCONF over SSH feature of Cisco IOS XE Software could allow a low... Moderate Unreviewed
CVE-2022-20692 was published Apr 16, 2022
A Denial of Service (DoS) vulnerability in the processing of a flood of specific ARP traffic in... Moderate Unreviewed
CVE-2022-22191 was published Apr 15, 2022
A vulnerability has been identified in SIMATIC CFU DIQ (All versions), SIMATIC CFU PA (All... High Unreviewed
CVE-2022-25622 was published Apr 13, 2022
A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions <... High Unreviewed
CVE-2022-27194 was published Apr 13, 2022
A specially crafted packet sent to the Fernhill SCADA Server Version 3.77 and earlier may cause... High Unreviewed
CVE-2022-21155 was published Apr 13, 2022
Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager,... High Unreviewed
CVE-2022-28773 was published Apr 13, 2022
Adding a very large number of tags to a runner in GitLab CE/EE affecting all versions prior to 14... Moderate Unreviewed
CVE-2022-1099 was published Apr 5, 2022
A denial of service vulnerability when rendering RDoc files in GitLab CE/EE versions 10 to 14.7.7... Moderate Unreviewed
CVE-2022-1185 was published Apr 5, 2022
A potential DoS vulnerability was discovered in Gitlab CE/EE versions 13.7 before 14.7.7, all... High Unreviewed
CVE-2022-1174 was published Apr 5, 2022
A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this... Moderate Unreviewed
CVE-2022-1210 was published Apr 4, 2022
Unauthenticated users can access sensitive web URLs through GET request, which should be... Moderate Unreviewed
CVE-2021-32503 was published Apr 3, 2022
An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was... Moderate Unreviewed
CVE-2022-0489 was published Apr 3, 2022
totolink EX300_v2, ver V4.0.3c.140_B20210429 and A720R ,ver V4.1.5cu.470_B20200911 have an issue... Moderate Unreviewed
CVE-2021-43662 was published Apr 1, 2022
An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10.... Moderate Unreviewed
CVE-2022-0488 was published Mar 29, 2022
libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as... Moderate Unreviewed
CVE-2022-27943 was published Mar 27, 2022
In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer... Moderate Unreviewed
CVE-2021-22100 was published Mar 26, 2022
A resource exhaustion issue was addressed with improved input validation. This issue is fixed in... Moderate Unreviewed
CVE-2022-22588 was published Mar 19, 2022
In Package Manger, there is a possible permanent denial of service due to resource exhaustion.... Moderate Unreviewed
CVE-2021-39624 was published Mar 17, 2022
CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to... High Unreviewed
CVE-2022-22145 was published Mar 12, 2022
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious... Moderate Unreviewed
CVE-2021-3733 was published Mar 11, 2022
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a... Moderate Unreviewed
CVE-2021-38989 was published Mar 8, 2022
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a... Moderate Unreviewed
CVE-2021-38988 was published Mar 8, 2022
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged trusted host user to exploit a... High Unreviewed
CVE-2022-22351 was published Mar 8, 2022
regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply... High Unreviewed
CVE-2022-24921 was published Mar 6, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database