GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,119
NuGet
735
pip
3,941
Pub
12
RubyGems
945
Rust
1,018
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
212 advisories
Filter by severity
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive...
Moderate
Unreviewed
CVE-2025-1761
was published
Sep 9, 2025
Oxford Instruments Imaris Viewer IMS File Parsing Uninitialized Pointer Remote Code Execution...
High
Unreviewed
CVE-2025-9274
was published
Sep 2, 2025
A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime...
Moderate
Unreviewed
CVE-2021-34596
was published
May 24, 2022
A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an...
High
Unreviewed
CVE-2025-32451
was published
Aug 13, 2025
InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an Access of Uninitialized...
High
Unreviewed
CVE-2025-54207
was published
Aug 12, 2025
A local code execution vulnerability exists in the Rockwell Automation Arena® due to an...
High
Unreviewed
CVE-2025-2286
was published
Apr 8, 2025
A local code execution vulnerability exists in the Rockwell Automation Arena® due to an...
High
Unreviewed
CVE-2025-2287
was published
Apr 8, 2025
A local code execution vulnerability exists in the Rockwell Automation Arena® due to an...
High
Unreviewed
CVE-2025-2285
was published
Apr 8, 2025
Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an Access of Uninitialized...
High
Unreviewed
CVE-2025-47121
was published
Jul 9, 2025
InCopy versions 20.3, 19.5.3 and earlier are affected by an Access of Uninitialized Pointer...
High
Unreviewed
CVE-2025-47098
was published
Jul 9, 2025
InDesign Desktop versions 19.5.3 and earlier are affected by an Access of Uninitialized Pointer...
High
Unreviewed
CVE-2025-43592
was published
Jul 9, 2025
Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an Access of Uninitialized...
High
Unreviewed
CVE-2025-49529
was published
Jul 9, 2025
Improper initialization of variables in the DXE driver may allow a privileged user to leak...
Moderate
Unreviewed
CVE-2023-20597
was published
Sep 20, 2023
Improper initialization of variables in the DXE driver may allow a privileged user to leak...
Moderate
Unreviewed
CVE-2023-20594
was published
Sep 20, 2023
An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function...
High
Unreviewed
CVE-2025-26599
was published
Feb 25, 2025
Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Access of Uninitialized Pointer...
High
Unreviewed
CVE-2025-43545
was published
May 13, 2025
Animate versions 24.0.8, 23.0.11 and earlier are affected by an Access of Uninitialized Pointer...
High
Unreviewed
CVE-2025-43557
was published
May 13, 2025
Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Access of Uninitialized...
High
Unreviewed
CVE-2025-30326
was published
May 13, 2025
Access of uninitialized pointer in the Intel(R) Trace Analyzer and Collector before version 2021...
Moderate
Unreviewed
CVE-2022-21156
was published
Feb 11, 2022
Luxion KeyShot PVS File Parsing Access of Uninitialized Pointer Remote Code Execution...
High
Unreviewed
CVE-2025-1047
was published
Apr 23, 2025
An uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1...
High
Unreviewed
CVE-2017-9670
was published
May 17, 2022
Within the <code>lg_init()</code> function, if several allocations succeed but then one fails, an...
High
Unreviewed
CVE-2022-34480
was published
Dec 22, 2022
Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X...
High
Unreviewed
CVE-2016-1005
was published
May 17, 2022
In the Linux kernel, the following vulnerability has been resolved:
ASoC: qcom: Fix...
Moderate
Unreviewed
CVE-2024-26799
was published
Apr 4, 2024
Luxion KeyShot DAE File Parsing Access of Uninitialized Pointer Remote Code Execution...
High
Unreviewed
CVE-2025-2530
was published
Mar 25, 2025
ProTip!
Advisories are also available from the
GraphQL API