GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,134
Erlang
29
GitHub Actions
19
Go
1,941
Maven
5,000+
npm
3,681
NuGet
650
pip
3,298
Pub
11
RubyGems
877
Rust
830
Swift
35
Unreviewed advisories
All unreviewed
5,000+
2,125 advisories
Filter by severity
Downloads Resources over HTTP in cmake
High
CVE-2016-10642
was published
for
cmake
(npm)
Aug 15, 2018
Downloads Resources over HTTP in bionode-sra
High
CVE-2016-10613
was published
for
bionode-sra
(npm)
Feb 18, 2019
Downloads Resources over HTTP in libxl
High
CVE-2016-10585
was published
for
libxl
(npm)
Feb 18, 2019
Downloads Resources over HTTP in node-bsdiff-android
High
CVE-2016-10641
was published
for
node-bsdiff-android
(npm)
Sep 18, 2018
Downloads Resources over HTTP in prince
High
CVE-2016-10591
was published
for
prince
(npm)
Feb 18, 2019
Downloads Resources over HTTP in cobalt-cli
High
CVE-2016-10597
was published
for
cobalt-cli
(npm)
Feb 18, 2019
Downloads Resources over HTTP in openframe-glslviewer
High
CVE-2016-10607
was published
for
openframe-glslviewer
(npm)
Feb 18, 2019
Downloads Resources over HTTP in openframe-image
High
CVE-2016-10616
was published
for
openframe-image
(npm)
Feb 18, 2019
Improper Privilege Management in Apache Karaf
High
CVE-2018-11786
was published
for
org.apache.karaf:apache-karaf
(Maven)
Dec 21, 2018
Improper Privilege Management in HashiCorp Nomad
High
CVE-2021-3283
was published
for
github.com/hashicorp/nomad
(Go)
Jun 24, 2021
Improper Privilege Management in org.apache.hadoop:hadoop-main
High
CVE-2018-11767
was published
for
org.apache.hadoop:hadoop-main
(Maven)
Mar 25, 2019
H C Mingham-Smith Ltd - Tardis 2000 Privilege escalation.Version 1.6 is vulnerable to privilege...
High
Unreviewed
CVE-2022-39182
was published
Jan 12, 2023
In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing...
High
Unreviewed
CVE-2021-39653
was published
Dec 16, 2021
In ims service, there is a possible escalation of privilege due to a missing permission check....
High
Unreviewed
CVE-2022-20053
was published
Mar 11, 2022
An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX...
High
Unreviewed
CVE-2021-32025
was published
Mar 11, 2022
'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products...
High
Unreviewed
CVE-2022-22141
was published
Mar 12, 2022
In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a...
High
Unreviewed
CVE-2021-39693
was published
Mar 17, 2022
In multiple functions of odsign_main.cpp, there is a possible way to persist system attack due to...
High
Unreviewed
CVE-2021-39689
was published
Mar 17, 2022
A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.3....
High
Unreviewed
CVE-2022-22665
was published
Mar 19, 2022
In NotificationStackScrollLayout of NotificationStackScrollLayout.java, there is a possible way...
High
Unreviewed
CVE-2021-0957
was published
Mar 17, 2022
In several functions of binder.c, there is a possible way to represent the wrong domain to...
High
Unreviewed
CVE-2021-39686
was published
Mar 17, 2022
A privilege escalation vulnerability exists in the Windows version of installation for Advantech...
High
Unreviewed
CVE-2021-21910
was published
Dec 23, 2021
A logic issue was addressed with improved state management. This issue is fixed in iOS 15.4 and...
High
Unreviewed
CVE-2022-22639
was published
Mar 19, 2022
certain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address...
High
Unreviewed
CVE-2021-28710
was published
Nov 22, 2021
ProTip!
Advisories are also available from the
GraphQL API