Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,134
Erlang
29
GitHub Actions
19
Go
1,941
Maven
5,000+
npm
3,681
NuGet
650
pip
3,298
Pub
11
RubyGems
877
Rust
830
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

4,434 advisories

Loading
On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP APM portal access is... Moderate Unreviewed
CVE-2022-23014 was published Jan 26, 2022
An issue was discovered in COINS Construction Cloud 11.12. Due to insufficient input... Moderate Unreviewed
CVE-2021-45223 was published Jan 25, 2022
An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user... Moderate Unreviewed
CVE-2021-45226 was published Jan 25, 2022
An Improper Input Validation vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper... Moderate Unreviewed
CVE-2022-22163 was published Jan 20, 2022
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol... Moderate Unreviewed
CVE-2022-22166 was published Jan 20, 2022
An Improper Validation of Syntactic Correctness of Input vulnerability in the Juniper DHCP daemon... Moderate Unreviewed
CVE-2022-22176 was published Jan 20, 2022
A Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the... Moderate Unreviewed
CVE-2022-22179 was published Jan 20, 2022
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3... Moderate Unreviewed
CVE-2022-0124 was published Jan 19, 2022
GPAC v1.1.0 was discovered to contain an invalid call in the function gf_node_changed(). This... Moderate Unreviewed
CVE-2021-45763 was published Jan 15, 2022
AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a... Moderate Unreviewed
CVE-2021-43762 was published Jan 14, 2022
A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1... Moderate Unreviewed
CVE-2022-22271 was published Jan 11, 2022
In wifi driver, there is a possible system crash due to a missing validation check. This could... Moderate Unreviewed
CVE-2021-41789 was published Jan 5, 2022
In vow driver, there is a possible memory corruption due to improper input validation. This could... Moderate Unreviewed
CVE-2022-20014 was published Jan 5, 2022
Improper input validation in TrustZone memory transfer interface can lead to information... Moderate Unreviewed
CVE-2021-30278 was published Jan 4, 2022
Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does... Moderate Unreviewed
CVE-2021-43548 was published Dec 28, 2021
Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote... Moderate Unreviewed
CVE-2021-4059 was published Dec 24, 2021
Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a... Moderate Unreviewed
CVE-2021-4068 was published Dec 24, 2021
In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This... Moderate Unreviewed
CVE-2021-0674 was published Dec 18, 2021
In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could... Moderate Unreviewed
CVE-2021-0900 was published Dec 18, 2021
In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could... Moderate Unreviewed
CVE-2021-0902 was published Dec 18, 2021
Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which... Moderate Unreviewed
CVE-2021-37863 was published Dec 18, 2021
An attacker with basic CRUD permissions on a replicated collection can run the applyOps command... Moderate Unreviewed
CVE-2021-20330 was published Dec 16, 2021
Microsoft SharePoint Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-42320. Moderate Unreviewed
CVE-2021-43242 was published Dec 16, 2021
When a user opens a manipulated GIF (.gif) file received from untrusted sources in SAP 3D Visual... Moderate Unreviewed
CVE-2021-42068 was published Dec 15, 2021
When a user opens manipulated Jupiter Tessellation (.jt) file received from untrusted sources in... Moderate Unreviewed
CVE-2021-42070 was published Dec 15, 2021
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database