GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,324
Erlang
31
GitHub Actions
21
Go
2,087
Maven
5,000+
npm
3,751
NuGet
674
pip
3,437
Pub
12
RubyGems
892
Rust
881
Swift
37
Unreviewed advisories
All unreviewed
5,000+
225 advisories
Filter by severity
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse()...
Moderate
Unreviewed
CVE-2023-38472
was published
Nov 2, 2023
A vulnerability was found in Avahi, where a reachable assertion exists in...
Moderate
Unreviewed
CVE-2023-38469
was published
Nov 2, 2023
An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead...
Moderate
Unreviewed
CVE-2022-38349
was published
Aug 22, 2023
A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of...
Moderate
Unreviewed
CVE-2022-37052
was published
Aug 22, 2023
Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of...
Moderate
Unreviewed
CVE-2021-46179
was published
Aug 22, 2023
An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of...
Moderate
Unreviewed
CVE-2022-37051
was published
Aug 22, 2023
An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function...
Moderate
Unreviewed
CVE-2022-35205
was published
Aug 22, 2023
Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by...
Moderate
Unreviewed
CVE-2021-31294
was published
Jul 16, 2023
A Reachable Assertion vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS...
Moderate
Unreviewed
CVE-2023-36840
was published
Jul 14, 2023
libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook...
Moderate
Unreviewed
CVE-2023-37836
was published
Jul 14, 2023
malformed proposed intoto entries can cause a panic
Moderate
CVE-2023-33199
was published
for
github.com/sigstore/rekor
(Go)
May 26, 2023
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the vm_loop...
Moderate
Unreviewed
CVE-2023-31920
was published
May 12, 2023
Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the...
Moderate
Unreviewed
CVE-2023-31916
was published
May 12, 2023
Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the...
Moderate
Unreviewed
CVE-2023-31918
was published
May 12, 2023
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the...
Moderate
Unreviewed
CVE-2023-31919
was published
May 12, 2023
Jerryscript 3.0 *commit 1a2c047) was discovered to contain an Assertion Failure via the component...
Moderate
Unreviewed
CVE-2023-31913
was published
May 12, 2023
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the...
Moderate
Unreviewed
CVE-2023-31921
was published
May 12, 2023
llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements...
Moderate
Unreviewed
CVE-2023-29935
was published
May 5, 2023
Denial of service due to reachable assertion in modem while processing filter rule from...
Moderate
Unreviewed
CVE-2022-25675
was published
Dec 13, 2022
`CHECK_EQ` fail via input in `SparseMatrixNNZ`
Moderate
CVE-2022-41901
was published
for
tensorflow
(pip)
Nov 21, 2022
`CHECK` fail via inputs in `SdcaOptimizer`
Moderate
CVE-2022-41899
was published
for
tensorflow
(pip)
Nov 21, 2022
`CHECK_EQ` fail in `tf.raw_ops.TensorListResize`
Moderate
CVE-2022-41893
was published
for
tensorflow
(pip)
Nov 21, 2022
JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in...
Moderate
Unreviewed
CVE-2022-40755
was published
Sep 17, 2022
TensorFlow vulnerable to `CHECK` fail in `Save` and `SaveSlices`
Moderate
CVE-2022-35983
was published
for
tensorflow
(pip)
Sep 16, 2022
TensorFlow vulnerable to `CHECK` fail in `ParameterizedTruncatedNormal`
Moderate
CVE-2022-35984
was published
for
tensorflow
(pip)
Sep 16, 2022
ProTip!
Advisories are also available from the
GraphQL API