Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,300
Erlang
31
GitHub Actions
21
Go
2,069
Maven
5,000+
npm
3,744
NuGet
668
pip
3,429
Pub
12
RubyGems
892
Rust
880
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

811 advisories

Loading
Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free,... Moderate Unreviewed
CVE-2025-0238 was published Jan 7, 2025
Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment... Moderate Unreviewed
CVE-2025-0240 was published Jan 7, 2025
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use after... Moderate Unreviewed
CVE-2024-56623 was published Dec 27, 2024
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make... Moderate Unreviewed
CVE-2023-28469 was published Jun 2, 2023
in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through use after free. Moderate Unreviewed
CVE-2024-54030 was published Jan 7, 2025
Memory corruption while processing frame command IOCTL calls. Moderate Unreviewed
CVE-2024-33059 was published Jan 6, 2025
Memory corruption while invoking IOCTL calls to unmap the DMA buffers. Moderate Unreviewed
CVE-2024-33055 was published Jan 6, 2025
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Free... Moderate Unreviewed
CVE-2021-46986 was published Feb 28, 2024
In the Linux kernel, the following vulnerability has been resolved: xdp, net: Fix use-after-free... Moderate Unreviewed
CVE-2021-47299 was published May 21, 2024
In the Linux kernel, the following vulnerability has been resolved: userfaultfd: release page in... Moderate Unreviewed
CVE-2021-46988 was published Feb 28, 2024
Use after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to... Moderate Unreviewed
CVE-2024-4368 was published May 1, 2024
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Avoid potential... Moderate Unreviewed
CVE-2024-26801 was published Apr 4, 2024
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in... Moderate Unreviewed
CVE-2024-35870 was published May 19, 2024
Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205... Moderate Unreviewed
CVE-2022-44519 was published Dec 19, 2024
In bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a possible out of bounds read due to a... Moderate Unreviewed
CVE-2018-9483 was published Nov 20, 2024
Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain an... Moderate Unreviewed
CVE-2019-13511 was published May 24, 2022
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix a use-after... Moderate Unreviewed
CVE-2021-47142 was published Mar 25, 2024
In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: Register sysfs... Moderate Unreviewed
CVE-2024-49925 was published Oct 21, 2024
In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap api:... Moderate Unreviewed
CVE-2024-50084 was published Oct 29, 2024
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between... Moderate Unreviewed
CVE-2021-46958 was published Feb 27, 2024
openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c. Moderate Unreviewed
CVE-2024-25763 was published Feb 26, 2024
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: af_bluetooth: Fix... Moderate Unreviewed
CVE-2024-26886 was published Apr 17, 2024
In the Linux kernel, the following vulnerability has been resolved: fbdev: imsttfb: fix a... Moderate Unreviewed
CVE-2023-52838 was published May 21, 2024
HDF5 Library through 1.14.3 has a SEGV in H5T_close_real in H5T.c, resulting in a corrupted... Moderate Unreviewed
CVE-2024-32610 was published May 14, 2024
Memory corruption while invoking redundant release command to release one buffer from user space... Moderate Unreviewed
CVE-2024-33040 was published Dec 2, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database