Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,154
Erlang
30
GitHub Actions
19
Go
1,966
Maven
5,000+
npm
3,694
NuGet
652
pip
3,311
Pub
11
RubyGems
881
Rust
831
Swift
35
Unreviewed advisories
All unreviewed
5,000+

6 advisories

Loading
Improper Verification of Communication Channel in @theia/plugin-ext Moderate
CVE-2021-41038 was published for @theia/plugin-ext (npm) Nov 15, 2021
SleekXMPP and Slixmpp Incorrect Implementation of Message Carbons Moderate
CVE-2017-5591 was published for SleekXMPP (pip) May 13, 2022
Improper Verification of Source of a Communication Channel in Apache Tomcat Moderate
CVE-2016-0763 was published for org.apache.tomcat:tomcat (Maven) May 14, 2022
sunSUNQ
usememos/memos vulnerable to Improper Verification of Source of a Communication Channel Moderate
CVE-2022-4800 was published for github.com/usememos/memos (Go) Dec 28, 2022
usememos/memos vulnerable to Improper Verification of Source of a Communication Channel Moderate
CVE-2022-4848 was published for github.com/usememos/memos (Go) Dec 29, 2022
Constallation has pods exposed to peers in VPC High
GHSA-g8fc-vrcg-8vjg was published for github.com/edgelesssys/constellation/v2 (Go) Apr 15, 2024
brb
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database