Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

2,563 advisories

Loading
In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to... Moderate Unreviewed
CVE-2022-20065 was published Apr 12, 2022
Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows attackers to... Moderate Unreviewed
CVE-2022-27821 was published Apr 12, 2022
In ~Impl of C2AllocatorIon.cpp, there is a possible out of bounds read due to a use after free.... Moderate Unreviewed
CVE-2021-39803 was published Apr 13, 2022
An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot... Moderate Unreviewed
CVE-2021-40425 was published Apr 15, 2022
An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot... Moderate Unreviewed
CVE-2021-40424 was published Apr 15, 2022
Improper boundary check in sflvd_rdbuf_bits of libsflvextractor prior to SMR Apr-2022 Release 1... Moderate Unreviewed
CVE-2022-27831 was published Apr 12, 2022
In preloader (partition), there is a possible out of bounds write due to a missing bounds check.... Moderate Unreviewed
CVE-2022-20074 was published Apr 12, 2022
The affected product is vulnerable to an out-of-bounds read, which may result in disclosure of... Moderate Unreviewed
CVE-2022-21202 was published Apr 13, 2022
A malformed input file can lead to a segfault due to an out of bounds array access in... Moderate Unreviewed
CVE-2020-25713 was published May 24, 2022
In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()"... Moderate Unreviewed
CVE-2020-35533 was published Sep 2, 2022
In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function ... Moderate Unreviewed
CVE-2020-35532 was published Sep 2, 2022
An exploitable information disclosure vulnerability exists in the packet-parsing functionality of... Moderate Unreviewed
CVE-2019-5065 was published May 24, 2022
An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and... Moderate Unreviewed
CVE-2020-11763 was published May 24, 2022
In the nl80211_policy policy of nl80211.c, there is a possible out of bounds read due to a... Moderate Unreviewed
CVE-2020-27068 was published May 24, 2022
An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing... Moderate Unreviewed
CVE-2019-5034 was published May 24, 2022
When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27... Moderate Unreviewed
CVE-2020-7059 was published May 24, 2022
Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure... Moderate Unreviewed
CVE-2021-28116 was published May 24, 2022
In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer... Moderate Unreviewed
CVE-2021-0460 was published May 24, 2022
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded... Moderate Unreviewed
CVE-2020-13496 was published May 24, 2022
In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function ... Moderate Unreviewed
CVE-2020-35531 was published Sep 2, 2022
Object lifecycle issue in SwiftShader in Google Chrome prior to 75.0.3770.80 allowed a remote... Moderate Unreviewed
CVE-2019-5835 was published May 24, 2022
Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior,... Moderate Unreviewed
CVE-2021-20606 was published Dec 18, 2021
When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below... Moderate Unreviewed
CVE-2020-7060 was published May 24, 2022
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE... Moderate Unreviewed
CVE-2020-11760 was published May 24, 2022
Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of... Moderate Unreviewed
CVE-2022-38410 was published Sep 17, 2022
ProTip! Advisories are also available from the GraphQL API