GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,076
Erlang
29
GitHub Actions
19
Go
1,895
Maven
5,000+
npm
3,630
NuGet
638
pip
3,244
Pub
10
RubyGems
862
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+
44 advisories
Filter by severity
SaltStack Salt is vulnerable to shell injection via ProxyCommand argument
Critical
CVE-2021-3197
was published
for
salt
(pip)
May 24, 2022
Ansible Arbitrary Code Execution
Critical
CVE-2014-4967
was published
for
ansible
(pip)
May 17, 2022
Ansible Arbitrary Code Execution
Critical
CVE-2014-4966
was published
for
ansible
(pip)
May 17, 2022
Reddit Terminal Viewer (RTV) vulnerable to argument injection attacks
High
CVE-2017-17516
was published
for
rtv
(pip)
May 14, 2022
Command injection in libvcs and vcspull
High
CVE-2022-21187
was published
for
libvcs
(pip)
Mar 15, 2022
Arbitrary expression injection in Pillow
Critical
CVE-2022-22817
was published
for
Pillow
(pip)
Jan 12, 2022
vault-cli contains possible RCE when reading user-defined data
High
CVE-2021-43837
was published
for
vault-cli
(pip)
Dec 16, 2021
lxml's HTML Cleaner allows crafted and SVG embedded scripts to pass through
High
CVE-2021-43818
was published
for
lxml
(pip)
Dec 13, 2021
pwntools Server-Side Template Injection (SSTI) vulnerability
Critical
CVE-2020-28468
was published
for
pwntools
(pip)
Apr 20, 2021
HTML injection in email and account expiry notifications
Moderate
CVE-2021-21333
was published
for
matrix-synapse
(pip)
Mar 26, 2021
Denial of service attack via incorrect parameters in Matrix Synapse
Moderate
CVE-2020-26257
was published
for
matrix-synapse
(pip)
Dec 9, 2020
Remote Code Execution in Red Discord Bot
High
CVE-2020-15147
was published
for
Red-DiscordBot
(pip)
Aug 21, 2020
Remote Code Execution in Red Discord Bot
High
CVE-2020-15140
was published
for
Red-DiscordBot
(pip)
Aug 21, 2020
Moderate severity vulnerability that affects invenio-app
Moderate
CVE-2019-1020006
was published
for
invenio-app
(pip)
Jul 16, 2019
ProTip!
Advisories are also available from the
GraphQL API