Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

445 advisories

Loading
Double free in algorithmica High
CVE-2021-31996 was published for algorithmica (Rust) Aug 25, 2021
Double free in toodee Critical
CVE-2021-28028 was published for toodee (Rust) Sep 1, 2021
Double free in stack_dst Critical
CVE-2021-28034 was published for stack_dst (Rust) Sep 1, 2021
Double Free in OpenCV High
CVE-2016-1516 was published for opencv-contrib-python (pip) Oct 12, 2021
An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted... Moderate Unreviewed
CVE-2021-43268 was published Nov 25, 2021
There is a Incorrect Calculation of Buffer Size vulnerability in Huawei Smartphone.Successful... High Unreviewed
CVE-2021-37072 was published Dec 8, 2021
Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by... Critical Unreviewed
CVE-2021-44732 was published Dec 21, 2021
A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of... Moderate Unreviewed
CVE-2021-45288 was published Dec 22, 2021
There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability... Critical Unreviewed
CVE-2021-37120 was published Jan 4, 2022
There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of... High Unreviewed
CVE-2021-40038 was published Jan 11, 2022
A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream... Moderate Unreviewed
CVE-2021-37529 was published Jan 13, 2022
The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_list_del function in... Moderate Unreviewed
CVE-2021-40573 was published Jan 14, 2022
The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line... High Unreviewed
CVE-2021-40574 was published Jan 14, 2022
The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmx_finalize function in... Moderate Unreviewed
CVE-2021-40572 was published Jan 14, 2022
The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst_box_read function in... High Unreviewed
CVE-2021-40571 was published Jan 14, 2022
The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avc_compute_poc function... High Unreviewed
CVE-2021-40570 was published Jan 14, 2022
The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the iloc_entry_del... Moderate Unreviewed
CVE-2021-40569 was published Jan 14, 2022
On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is... High Unreviewed
CVE-2022-23012 was published Jan 26, 2022
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user... High Unreviewed
CVE-2021-22600 was published Jan 27, 2022
This vulnerability allows remote attackers to execute arbitrary code on affected installations of... High Unreviewed
CVE-2021-46625 was published Feb 19, 2022
This vulnerability allows remote attackers to execute arbitrary code on affected installations of... High Unreviewed
CVE-2021-46621 was published Feb 19, 2022
A double-free was found in the way 389-ds-base handles virtual attributes context in persistent... High Unreviewed
CVE-2021-4091 was published Feb 19, 2022
In libsixel 1.8.6, sixel_encoder_output_without_macro (called from sixel_encoder_encode_frame in... Moderate Unreviewed
CVE-2021-46700 was published Feb 20, 2022
saitoha libsixel v1.8.6 was discovered to contain a double free via the component... High Unreviewed
CVE-2020-36123 was published Mar 11, 2022
Adobe Bridge version 11.1.1 (and earlier) is affected by a double free vulnerability when parsing... High Unreviewed
CVE-2021-42533 was published Mar 17, 2022
ProTip! Advisories are also available from the GraphQL API