GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
21 advisories
Filter by severity
Vyper has a double eval in For List Iter
Low
CVE-2025-27104
was published
for
vyper
(pip)
Feb 21, 2025
Evmos transaction execution not accounting for all state transition after interaction with precompiles
Critical
CVE-2024-32644
was published
for
github.com/evmos/evmos/v16
(Go)
Apr 10, 2024
Grafana Missing Synchronization vulnerability
High
CVE-2023-2801
was published
for
github.com/grafana/grafana
(Go)
Jun 6, 2023
Improper Synchronization in Jenkins Convertigo Mobile Platform Plugin
Low
CVE-2022-25210
was published
for
com.convertigo.jenkins.plugins:convertigo-mobile-platform
(Maven)
Feb 16, 2022
Deadlock in mutually recursive `tf.function` objects
Moderate
CVE-2021-41213
was published
for
tensorflow
(pip)
Nov 10, 2021
Improper Synchronization and Race Condition in vm-memory
High
CVE-2020-13759
was published
for
vm-memory
(Rust)
Aug 25, 2021
Improper synchronization in buttplug
Moderate
CVE-2020-36218
was published
for
buttplug
(Rust)
Aug 25, 2021
Data race in atomic-option
Moderate
CVE-2020-36219
was published
for
atomic-option
(Rust)
Aug 25, 2021
Wrong memory orderings violates mutual exclusion in spin
High
CVE-2019-16137
was published
for
spin
(Rust)
Aug 25, 2021
ProTip!
Advisories are also available from the
GraphQL API