Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,247
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

195 advisories

Loading
A denial of service vulnerability was found in tipc_crypto_key_revoke in net/tipc/crypto.c in the... Moderate Unreviewed
CVE-2024-0641 was published Jan 17, 2024
A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net... Moderate Unreviewed
CVE-2024-0639 was published Jan 17, 2024
Cortex-A77 cores (r0p0 and r1p0) are affected by erratum 1508412 where software, under certain... Moderate Unreviewed
CVE-2023-34320 was published Dec 8, 2023
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain... High Unreviewed
CVE-2023-44297 was published Dec 5, 2023
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain... Low Unreviewed
CVE-2023-44298 was published Dec 5, 2023
there is a possible use-after-free write due to improper locking. This could lead to local... High Unreviewed
CVE-2023-3781 was published Oct 11, 2023
Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this... High Unreviewed
CVE-2023-44119 was published Oct 11, 2023
Vyper has incorrect re-entrancy lock when key is empty string Moderate
CVE-2023-42441 was published for vyper (pip) Sep 18, 2023
trocher
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The... High Unreviewed
CVE-2023-32257 was published Jul 24, 2023
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The... High Unreviewed
CVE-2023-32258 was published Jul 24, 2023
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked... Moderate Unreviewed
CVE-2023-3750 was published Jul 24, 2023
A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in... Moderate Unreviewed
CVE-2023-2430 was published Jul 23, 2023
A deadlock flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to... Moderate Unreviewed
CVE-2023-0160 was published Jul 18, 2023
In multiple functions of io_uring.c, there is a possible kernel memory corruption due to... Moderate Unreviewed
CVE-2023-21400 was published Jul 13, 2023
In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due... High Unreviewed
CVE-2023-21189 was published Jun 28, 2023
Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object... Low Unreviewed
CVE-2023-3436 was published Jun 27, 2023
In vcu, there is a possible out of bounds write due to improper locking. This could lead to local... Moderate Unreviewed
CVE-2023-20743 was published Jun 6, 2023
In vcu, there is a possible use after free due to improper locking. This could lead to local... Moderate Unreviewed
CVE-2023-20733 was published Jun 6, 2023
In vcu, there is a possible use after free due to improper locking. This could lead to local... Moderate Unreviewed
CVE-2023-20737 was published Jun 6, 2023
In vcu, there is a possible out of bounds write due to improper locking. This could lead to local... Moderate Unreviewed
CVE-2023-20746 was published Jun 6, 2023
In vcu, there is a possible out of bounds write due to improper locking. This could lead to local... Moderate Unreviewed
CVE-2023-20745 was published Jun 6, 2023
Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained... Moderate Unreviewed
CVE-2023-2612 was published May 31, 2023
Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5. High Unreviewed
CVE-2023-22318 was published May 15, 2023
A denial of service problem was found, due to a possible recursive locking scenario, resulting in... Moderate Unreviewed
CVE-2023-2269 was published Apr 25, 2023
The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of... High Unreviewed
CVE-2023-2007 was published Apr 25, 2023
ProTip! Advisories are also available from the GraphQL API