Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,714
Erlang
34
GitHub Actions
28
Go
2,301
Maven
5,000+
npm
3,942
NuGet
711
pip
3,711
Pub
12
RubyGems
920
Rust
960
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

298 advisories

Loading
UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer... Critical Unreviewed
CVE-2023-52389 was published Jan 27, 2024
The authentication mechanism can be bypassed by overflowing the value of the Cookie ... Critical Unreviewed
CVE-2023-49262 was published Jan 12, 2024
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. Critical Unreviewed
CVE-2023-33032 was published Jan 2, 2024
An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3... Critical Unreviewed
CVE-2023-51714 was published Dec 24, 2023
PlutoSVG commit 336c02997277a1888e6ccbbbe674551a0582e5c4 and before was discovered to contain an... Critical Unreviewed
CVE-2023-44709 was published Dec 14, 2023
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who... Critical Unreviewed
CVE-2023-6345 was published Nov 29, 2023
Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of... Critical Unreviewed
CVE-2023-35966 was published Oct 11, 2023
Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of... Critical Unreviewed
CVE-2023-35965 was published Oct 11, 2023
Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data... Critical Unreviewed
CVE-2023-35968 was published Oct 11, 2023
Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data... Critical Unreviewed
CVE-2023-35967 was published Oct 11, 2023
In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to... Critical Unreviewed
CVE-2023-35681 was published Sep 11, 2023
Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab,... Critical Unreviewed
CVE-2023-36326 was published Sep 1, 2023
Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e,... Critical Unreviewed
CVE-2023-36327 was published Sep 1, 2023
Integer Overflow vulnerability in mp_grow in libtom libtommath before commit... Critical Unreviewed
CVE-2023-36328 was published Sep 1, 2023
An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch... Critical Unreviewed
CVE-2023-35085 was published Aug 10, 2023
An integer overflow was addressed with improved input validation. This issue is fixed in watchOS... Critical Unreviewed
CVE-2023-36495 was published Jul 28, 2023
Libpeconv – integer overflow, before commit 75b1565 (30/11/2022). Critical Unreviewed
CVE-2023-23462 was published Jul 6, 2023
Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer... Critical Unreviewed
CVE-2022-48336 was published Jun 26, 2023
Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys prefix_len... Critical Unreviewed
CVE-2022-48333 was published Jun 26, 2023
Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys file_name_len integer... Critical Unreviewed
CVE-2022-48332 was published Jun 26, 2023
Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys total_len... Critical Unreviewed
CVE-2022-48334 was published Jun 26, 2023
Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer... Critical Unreviewed
CVE-2022-48335 was published Jun 26, 2023
Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys feature_name_len... Critical Unreviewed
CVE-2022-48331 was published Jun 26, 2023
Product: AndroidVersions: Android SoCAndroid ID: A-277775870 Critical Unreviewed
CVE-2021-0701 was published Jun 15, 2023
RenderDoc through 1.26 allows an Integer Overflow with a resultant Buffer Overflow (issue 1 of 2). Critical Unreviewed
CVE-2023-33863 was published Jun 7, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database