Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,871
Erlang
37
GitHub Actions
36
Go
2,504
Maven
5,000+
npm
4,149
NuGet
735
pip
3,949
Pub
12
RubyGems
945
Rust
1,025
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,288 advisories

Loading
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of... High Unreviewed
CVE-2023-38621 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of... High Unreviewed
CVE-2023-38619 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of... High Unreviewed
CVE-2023-38620 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of... High Unreviewed
CVE-2023-39273 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of... High Unreviewed
CVE-2023-39275 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing... High Unreviewed
CVE-2023-38650 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing... High Unreviewed
CVE-2023-38652 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of... High Unreviewed
CVE-2023-39271 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of... High Unreviewed
CVE-2023-39270 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table... High Unreviewed
CVE-2023-36915 was published Jan 8, 2024
Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table... High Unreviewed
CVE-2023-36916 was published Jan 8, 2024
An integer overflow vulnerability exists in the fstReaderIterBlocks2 temp_signal_value_buf... High Unreviewed
CVE-2023-36864 was published Jan 8, 2024
An integer overflow vulnerability exists in the LXT2 zlib block allocation functionality of... High Unreviewed
CVE-2023-35989 was published Jan 8, 2024
An integer overflow vulnerability exists in the FST fstReaderIterBlocks2 vesc allocation... High Unreviewed
CVE-2023-35992 was published Jan 8, 2024
An integer overflow vulnerability exists in the FST_BL_GEOM parsing maxhandle functionality of... High Unreviewed
CVE-2023-32650 was published Jan 8, 2024
An integer overflow vulnerability exists in the LXT2 lxt2_rd_trace value elements allocation... High Unreviewed
CVE-2023-35057 was published Jan 8, 2024
An integer overflow vulnerability exists in the fstReaderIterBlocks2 time_table tsec_nitems... High Unreviewed
CVE-2023-35128 was published Jan 8, 2024
An integer overflow vulnerability exists in the VZT longest_len value allocation functionality of... High Unreviewed
CVE-2023-35004 was published Jan 8, 2024
Memory corruption while receiving a message in Bus Socket Transport Server. Moderate Unreviewed
CVE-2023-33038 was published Jan 2, 2024
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. Critical Unreviewed
CVE-2023-33032 was published Jan 2, 2024
In battery, there is a possible information disclosure due to an integer overflow. This could... Moderate Unreviewed
CVE-2023-32881 was published Jan 2, 2024
An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3... Critical Unreviewed
CVE-2023-51714 was published Dec 24, 2023
Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow... High Unreviewed
CVE-2023-24609 was published Dec 22, 2023
Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC... High Unreviewed
CVE-2023-43826 was published Dec 19, 2023
PlutoSVG commit 336c02997277a1888e6ccbbbe674551a0582e5c4 and before was discovered to contain an... Critical Unreviewed
CVE-2023-44709 was published Dec 14, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database