Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
92
GitHub Actions
54
Go
4,217
Maven
5,000+
npm
5,000+
NuGet
1,021
pip
5,000+
Pub
13
RubyGems
1,103
Rust
1,443
Swift
61
Unreviewed advisories
All unreviewed
5,000+

32 advisories

Loading
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate... High Unreviewed
CVE-2026-43503 was published May 26, 2026
Object lifecycle issue in Dawn in Google Chrome prior to 148.0.7778.168 allowed a remote attacker... Moderate Unreviewed
CVE-2026-8582 was published May 14, 2026
Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168 allowed a... High Unreviewed
CVE-2026-8517 was published May 14, 2026
PocketMine-MP: Player entities can still die and drop items in flaggedForDespawn state Low
GHSA-f9jp-856v-8642 was published for pocketmine/pocketmine-mp (Composer) Apr 6, 2026
kostamax27 Credited to kostamax27 and dktapps dktapps dktapps
Iterator failure issue in the multi-mode input module. Impact: Successful exploitation of this... Moderate Unreviewed
CVE-2025-54619 was published Aug 6, 2025
Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this... Moderate Unreviewed
CVE-2025-54621 was published Aug 6, 2025
Iterator failure vulnerability in the card management module. Impact: Successful exploitation of... Moderate Unreviewed
CVE-2025-54613 was published Aug 6, 2025
Iterator failure vulnerability in the card management module. Impact: Successful exploitation of... Moderate Unreviewed
CVE-2025-54612 was published Aug 6, 2025
Apache Zeppelin exposes server resources to unauthenticated attackers High
CVE-2024-41169 was published for org.apache.zeppelin:zeppelin-interpreter (Maven) Jul 12, 2025
Tokio broadcast channel calls clone in parallel, but does not require `Sync` Low
GHSA-rr8g-9fpq-6wmg was published for tokio (Rust) Apr 7, 2025
An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol... High Unreviewed
CVE-2025-21593 was published Jan 9, 2025
A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft... Moderate Unreviewed
CVE-2024-45383 was published Sep 12, 2024
Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix... High Unreviewed
CVE-2024-7889 was published Sep 12, 2024
Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an... Moderate Unreviewed
CVE-2024-37139 was published Jun 26, 2024
plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles... Moderate Unreviewed
CVE-2020-36774 was published Feb 19, 2024
Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may... High Unreviewed
CVE-2023-52387 was published Feb 18, 2024
Micronaut management endpoints vulnerable to drive-by localhost attack Moderate
CVE-2024-23639 was published for io.micronaut:micronaut-http-server (Maven) Feb 9, 2024
linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked... Moderate Unreviewed
CVE-2024-22365 was published Feb 6, 2024
Dell PowerScale OneFS versions 8.2.2.x through 9.6.0.x contains an improper control of a... Moderate Unreviewed
CVE-2023-44295 was published Dec 5, 2023
Dell PowerScale OneFS, 8.2.2.x through 9.6.0.x, contains an improper control of a resource... High Unreviewed
CVE-2023-44288 was published Dec 5, 2023
Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption... Moderate Unreviewed
CVE-2023-25942 was published Apr 4, 2023
A logic issue was addressed with improved state management. This issue is fixed in Apple Music 3... High Unreviewed
CVE-2022-32846 was published Feb 27, 2023
In unusual circumstances, selecting text could cause text selection caching to behave incorrectly... Moderate Unreviewed
CVE-2022-28287 was published Dec 22, 2022
Unauthenticated remote arbitrary code execution Critical Unreviewed
CVE-2022-27518 was published Dec 13, 2022
A vulnerability has been identified in SCALANCE SC622-2C (All versions < V2.3), SCALANCE SC622-2C... Moderate Unreviewed
CVE-2022-46144 was published Dec 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database