GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
1,998
Maven
5,000+
npm
3,710
NuGet
661
pip
3,364
Pub
11
RubyGems
885
Rust
846
Swift
36
Unreviewed advisories
All unreviewed
5,000+
255,734 advisories
Filter by severity
The goTenna Pro broadcast key name is always sent unencrypted and could reveal the location of...
Moderate
Unreviewed
CVE-2024-47128
was published
Sep 26, 2024
The goTenna Pro series does not authenticate public keys which allows an unauthenticated attacker...
High
Unreviewed
CVE-2024-47125
was published
Sep 26, 2024
cookie accepts cookie name, path, and domain with out of bounds characters
Low
CVE-2024-47764
was published
for
cookie
(npm)
Oct 4, 2024
Authorization bypass in Spring Security
Critical
CVE-2022-22978
was published
for
org.springframework.security:spring-security-core
(Maven)
May 20, 2022
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_chunk() function at...
High
Unreviewed
CVE-2024-46276
was published
Oct 1, 2024
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at...
High
Unreviewed
CVE-2024-46264
was published
Oct 1, 2024
In the Linux kernel, the following vulnerability has been resolved:
drm/bridge: tc358767: Check...
Moderate
Unreviewed
CVE-2024-46810
was published
Sep 27, 2024
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Check BIOS...
Moderate
Unreviewed
CVE-2024-46809
was published
Sep 27, 2024
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Check...
High
Unreviewed
CVE-2024-46813
was published
Sep 27, 2024
This issue was addressed with improved checks. This issue is fixed in iOS 18.0.1 and iPadOS 18.0...
Moderate
Unreviewed
CVE-2024-44207
was published
Oct 4, 2024
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_stored() function at...
High
Unreviewed
CVE-2024-46274
was published
Oct 1, 2024
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_make32() function at...
High
Unreviewed
CVE-2024-46261
was published
Oct 1, 2024
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_block() function at...
High
Unreviewed
CVE-2024-46267
was published
Oct 1, 2024
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Avoid race...
Moderate
Unreviewed
CVE-2024-46851
was published
Sep 27, 2024
cute_png v1.05 was discovered to contain a stack overflow via the cp_dynamic() function at...
High
Unreviewed
CVE-2024-46263
was published
Oct 1, 2024
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/pm: Fix negative...
High
Unreviewed
CVE-2024-46821
was published
Sep 27, 2024
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_load_png_mem()...
High
Unreviewed
CVE-2024-46258
was published
Oct 1, 2024
Stored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting...
Moderate
Unreviewed
CVE-2024-41587
was published
Oct 3, 2024
A security agent link following vulnerability in Trend Micro Apex One could allow a local...
High
Unreviewed
CVE-2024-36305
was published
Jun 11, 2024
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Full...
Moderate
Unreviewed
CVE-2024-6551
was published
Aug 29, 2024
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Forward soft...
Moderate
Unreviewed
CVE-2024-44961
was published
Sep 4, 2024
In the Linux kernel, the following vulnerability has been resolved:
x86/mm: Fix...
Moderate
Unreviewed
CVE-2024-44965
was published
Sep 4, 2024
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add array...
High
Unreviewed
CVE-2024-46804
was published
Sep 27, 2024
A logic issue was addressed with improved validation. This issue is fixed in iOS 18.0.1 and...
Moderate
Unreviewed
CVE-2024-44204
was published
Oct 4, 2024
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: core: Check for...
Moderate
Unreviewed
CVE-2024-44960
was published
Sep 4, 2024
ProTip!
Advisories are also available from the
GraphQL API