Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,569
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,522
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

382 advisories

Loading
In keyinstall, there is a possible information disclosure due to an integer overflow. This could... Moderate Unreviewed
CVE-2023-20635 was published Mar 7, 2023
In MP4v2 2.0.0, there is an integer underflow (with resultant memory corruption) when parsing... High Unreviewed
CVE-2018-14325 was published May 13, 2022
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are... High Unreviewed
CVE-2023-26421 was published Apr 12, 2023
Integer underflow in untrusted High
CVE-2018-20989 was published for untrusted (Rust) Aug 25, 2021
Named Pipe File System Elevation of Privilege Vulnerability. High Unreviewed
CVE-2022-22715 was published Feb 10, 2022
Microsoft Office Information Disclosure Vulnerability Moderate Unreviewed
CVE-2021-31178 was published May 24, 2022
A vulnerability in the Session Initiation Protocol (SIP) inspection module of Cisco Adaptive... High Unreviewed
CVE-2019-12678 was published May 24, 2022
gnark unsoundness in variable comparison / non-unique binary decomposition Moderate
CVE-2023-44378 was published for github.com/consensys/gnark (Go) Oct 4, 2023
kustosz Credited to kustosz
An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch. Critical Unreviewed
CVE-2022-4338 was published Jan 11, 2023
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect... High Unreviewed
CVE-2023-47360 was published Nov 13, 2023
An integer overflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1... Moderate Unreviewed
CVE-2023-43628 was published Dec 5, 2023
The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote... Moderate Unreviewed
CVE-2005-1891 was published May 1, 2022
Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows... High Unreviewed
CVE-2005-0199 was published May 1, 2022
Improper input validation on input data which is used to locate and copy the additional IEs in... Critical Unreviewed
CVE-2018-11930 was published May 24, 2022
Possible integer underflow can happen when calculating length of elementary stream info from... Critical Unreviewed
CVE-2019-2244 was published May 24, 2022
Possible integer underflow can happen when calculating length of elementary stream map from... Critical Unreviewed
CVE-2019-2245 was published May 24, 2022
An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially... High Unreviewed
CVE-2019-9755 was published May 24, 2022
An exploitable integer underflow vulnerability exists in the CMP-parsing functionality of... High Unreviewed
CVE-2019-5099 was published May 24, 2022
A freed memory access vulnerability exists in the SVG Marker Element feature of Apple Safari's... High Unreviewed
CVE-2019-5144 was published May 24, 2022
napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,... High Unreviewed
CVE-2020-8174 was published May 24, 2022
An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of... High Unreviewed
CVE-2021-28362 was published May 24, 2022
An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow... High Unreviewed
CVE-2023-35790 was published Jun 16, 2023
Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an... High Unreviewed
CVE-2022-28733 was published Jul 20, 2023
An integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of... High Unreviewed
CVE-2023-22308 was published Oct 12, 2023
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability High Unreviewed
CVE-2024-26208 was published Apr 9, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database