GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,866
Erlang
36
GitHub Actions
36
Go
2,491
Maven
5,000+
npm
4,110
NuGet
735
pip
3,933
Pub
12
RubyGems
945
Rust
1,018
Swift
39
Unreviewed advisories
All unreviewed
5,000+
309 advisories
Filter by severity
An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk...
Moderate
Unreviewed
CVE-2018-12228
was published
May 13, 2022
The lzw_add_to_dict function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.1 allows...
Moderate
Unreviewed
CVE-2017-9094
was published
May 13, 2022
The my_skip_input_data_fn function in imagew-jpeg.c in libimageworsener.a in ImageWorsener 1.3.1...
Moderate
Unreviewed
CVE-2017-9093
was published
May 13, 2022
When dynamic memory allocation fails, currently the process sleeps for one second and continues...
Moderate
Unreviewed
CVE-2017-18277
was published
May 13, 2022
An issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in...
Moderate
Unreviewed
CVE-2017-18236
was published
May 13, 2022
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10...
Moderate
Unreviewed
CVE-2017-2417
was published
May 13, 2022
The arch_timer_reg_read_stable macro in arch/arm64/include/asm/arch_timer.h in the Linux kernel...
Moderate
Unreviewed
CVE-2017-18261
was published
May 13, 2022
An issue was discovered in QPDF before 7.0.0. There is an infinite loop in the QPDFWriter:...
Moderate
Unreviewed
CVE-2017-18183
was published
May 13, 2022
An issue was discovered in Exempi before 2.4.4. The TradQT_Manager::ParseCachedBoxes function in...
Moderate
Unreviewed
CVE-2017-18238
was published
May 13, 2022
The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local...
Moderate
Unreviewed
CVE-2017-18208
was published
May 13, 2022
Timergrp module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10;...
Moderate
Unreviewed
CVE-2017-17150
was published
May 13, 2022
An issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref...
Moderate
Unreviewed
CVE-2017-18186
was published
May 13, 2022
Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50...
Moderate
Unreviewed
CVE-2017-17131
was published
May 13, 2022
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...
Moderate
Unreviewed
CVE-2017-15835
was published
May 13, 2022
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0...
Moderate
Unreviewed
CVE-2017-11338
was published
May 13, 2022
Bad reference counting in the context of accept_ice_connection() in gsm-xsmp-server.c in old...
Moderate
Unreviewed
CVE-2017-11171
was published
May 13, 2022
A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0...
Moderate
Unreviewed
CVE-2017-0685
was published
May 13, 2022
A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4...
Moderate
Unreviewed
CVE-2018-14629
was published
May 13, 2022
An external attacker is able to send a specially crafted email (with many recipients) and trigger...
Moderate
Unreviewed
CVE-2022-39052
was published
Oct 17, 2022
Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka...
Moderate
Unreviewed
CVE-2018-12154
was published
May 13, 2022
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31....
Moderate
Unreviewed
CVE-2018-18701
was published
May 13, 2022
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31....
Moderate
Unreviewed
CVE-2018-18700
was published
May 13, 2022
The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS...
Moderate
Unreviewed
CVE-2016-4453
was published
May 13, 2022
The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers...
Moderate
Unreviewed
CVE-2018-7751
was published
May 13, 2022
In The Sleuth Kit (TSK) 4.4.2, opening a crafted disk image triggers infinite recursion in...
Moderate
Unreviewed
CVE-2017-13756
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API