GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,781
Erlang
36
GitHub Actions
29
Go
2,345
Maven
5,000+
npm
3,976
NuGet
719
pip
3,772
Pub
12
RubyGems
923
Rust
980
Swift
38
Unreviewed advisories
All unreviewed
5,000+
42 advisories
Filter by severity
In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, and 14.1...
High
Unreviewed
CVE-2022-36795
was published
Oct 20, 2022
On certain hardware BIG-IP platforms, in version 15.1.x before 15.1.4 and 14.1.x before 14.1.3,...
High
Unreviewed
CVE-2022-23011
was published
Jan 26, 2022
An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti...
High
Unreviewed
CVE-2022-35258
was published
Dec 6, 2022
In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to...
High
Unreviewed
CVE-2020-0022
was published
May 24, 2022
library/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading...
High
Unreviewed
CVE-2019-17514
was published
May 24, 2022
VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before...
High
Unreviewed
CVE-2023-35848
was published
Jun 19, 2023
A vulnerability was discovered in the Rockwell Automation Armor PowerFlex device when the...
High
Unreviewed
CVE-2023-2423
was published
Aug 8, 2023
nistec has Incorrect Calculation in Multiplication of unreduced P-256 scalars
High
CVE-2023-24533
was published
for
filippo.io/nistec
(Go)
Mar 1, 2023
Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of...
High
Unreviewed
CVE-2024-6287
was published
Jun 24, 2024
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: don't allow...
High
Unreviewed
CVE-2024-41011
was published
Jul 18, 2024
Frontier's modexp precompile is slow for even modulus
High
CVE-2023-28431
was published
for
pallet-evm-precompile-modexp
(Rust)
Mar 21, 2023
libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type...
High
Unreviewed
CVE-2017-8326
was published
May 13, 2022
Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest...
High
Unreviewed
CVE-2017-8905
was published
May 13, 2022
The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS...
High
Unreviewed
CVE-2017-12134
was published
May 13, 2022
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts...
High
Unreviewed
CVE-2021-45960
was published
Feb 10, 2022
When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that...
High
Unreviewed
CVE-2025-4435
was published
Jun 3, 2025
ProTip!
Advisories are also available from the
GraphQL API