Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
42
GitHub Actions
43
Go
3,151
Maven
5,000+
npm
5,000+
NuGet
859
pip
4,451
Pub
12
RubyGems
991
Rust
1,179
Swift
50
Unreviewed advisories
All unreviewed
5,000+

28 advisories

Loading
Parse Server's OAuth2 adapter shares mutable state across providers via singleton instance Critical
CVE-2026-32242 was published for parse-server (npm) Mar 12, 2026
fancymalware Credited to fancymalware and mtrezza mtrezza mtrezza
A race condition was addressed with improved handling of symbolic links. This issue is fixed in... Critical Unreviewed
CVE-2026-20677 was published Feb 12, 2026
Eclipse Jersey has a Race Condition Critical
CVE-2025-12383 was published for org.glassfish.jersey.core:jersey-client (Maven) Nov 18, 2025
irene221b Credited to irene221b and yeikel yeikel yeikel
A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia... Critical Unreviewed
CVE-2025-43275 was published Jul 30, 2025
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia... Critical Unreviewed
CVE-2025-43244 was published Jul 30, 2025
A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.7.5... Critical Unreviewed
CVE-2025-30444 was published Apr 1, 2025
The server lacks thread safety and can be crashed by anomalous data sent by an anonymous user... Critical Unreviewed
CVE-2024-11144 was published Dec 16, 2024
A remote code execution (RCE) vulnerability in the component /inventory/doCptimpoptInventory of... Critical Unreviewed
CVE-2024-48069 was published Nov 19, 2024
Potential race conditions in IndexedDB could have caused memory corruption, leading to a... Critical Unreviewed
CVE-2024-10468 was published Oct 29, 2024
Grafana Race condition allowing privilege escalation Critical
CVE-2022-39328 was published for github.com/grafana/grafana (Go) May 14, 2024
TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability. This vulnerability allows... Critical Unreviewed
CVE-2023-27359 was published May 3, 2024
Pterodactyl Wings vulnerable to improper isolation of server file access Critical
CVE-2024-27102 was published for github.com/pterodactyl/wings (Go) Mar 15, 2024
KurtThiemann Credited to KurtThiemann, aft2d, and matthewpi aft2d aft2d
matthewpi matthewpi
snapd Race Condition vulnerability Critical
CVE-2022-3328 was published for github.com/snapcore/snapd (Go) Jan 8, 2024
This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13... Critical Unreviewed
CVE-2023-28201 was published May 8, 2023
The iaware module has a vulnerability in thread security. Successful exploitation of this... Critical Unreviewed
CVE-2022-44551 was published Nov 10, 2022
On PTX1000 System, PTX10002-60C System, after upgrading to an affected release, a Race Condition... Critical Unreviewed
CVE-2021-31382 was published May 24, 2022
file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict... Critical Unreviewed
CVE-2019-12450 was published May 24, 2022
Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or... Critical Unreviewed
CVE-2016-0930 was published May 17, 2022
Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1. Critical Unreviewed
CVE-2015-8556 was published May 17, 2022
The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently... Critical Unreviewed
CVE-2017-10915 was published May 17, 2022
Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel Critical Unreviewed
CVE-2021-39713 was published Mar 17, 2022
Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4... Critical Unreviewed
CVE-2021-41025 was published Dec 9, 2021
crossbeam-deque Data Race before v0.7.4 and v0.8.1 Critical
CVE-2021-32810 was published for crossbeam-deque (Rust) Aug 25, 2021
kmaork Credited to kmaork
Data race in internment Critical
CVE-2021-28037 was published for internment (Rust) Aug 25, 2021
Data races in rulinalg Critical
CVE-2020-35879 was published for rulinalg (Rust) Aug 25, 2021
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database