Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,273
Erlang
31
GitHub Actions
21
Go
2,055
Maven
5,000+
npm
3,739
NuGet
668
pip
3,417
Pub
12
RubyGems
891
Rust
872
Swift
36
Unreviewed advisories
All unreviewed
5,000+

4,709 advisories

Loading
Browsershot Improper Input Validation vulnerability High
CVE-2024-21549 was published for spatie/browsershot (Composer) Dec 20, 2024
There is an insufficient input verification vulnerability in Huawei product. Successful... High Unreviewed
CVE-2022-32144 was published Dec 20, 2024
There is an improper input verification vulnerability in Huawei printer product. Successful... High Unreviewed
CVE-2022-32204 was published Dec 20, 2024
Huawei printers have an input verification vulnerability. Successful exploitation of this... High Unreviewed
CVE-2022-34159 was published Dec 20, 2024
OpenShift Must Gather Operator Improper Input Validation vulnerability High
CVE-2024-25131 was published for github.com/openshift/must-gather (Go) Dec 19, 2024
Due to the flaws in the verification of input parameters, the attacker can input carefully... High Unreviewed
CVE-2020-12487 was published Dec 17, 2024
Velocidex WinPmem versions below 4.1 suffer from an Improper Input Validation vulnerability... High Unreviewed
CVE-2024-10972 was published Dec 16, 2024
Browsershot Local File Inclusion High
CVE-2024-21544 was published for spatie/browsershot (Composer) Dec 13, 2024
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally... High Unreviewed
CVE-2024-47238 was published Dec 12, 2024
Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this... High Unreviewed
CVE-2024-54107 was published Dec 12, 2024
Microsoft Defender for Endpoint on Android Spoofing Vulnerability High Unreviewed
CVE-2024-49057 was published Dec 12, 2024
Animate versions 23.0.8, 24.0.5 and earlier are affected by an Improper Input Validation... High Unreviewed
CVE-2024-52982 was published Dec 10, 2024
A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC S7-PLCSIM... High Unreviewed
CVE-2024-52051 was published Dec 10, 2024
Synapse allows a a malformed invite to break the invitee's `/sync` High
CVE-2024-52815 was published for matrix-synapse (pip) Dec 3, 2024
Memory corruption while processing API calls to NPU with invalid input. High Unreviewed
CVE-2024-43052 was published Dec 2, 2024
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW High Unreviewed
CVE-2017-15832 was published Nov 26, 2024
Kubernetes Nil pointer dereference in KCM after v1 HPA patch request High
CVE-2024-0793 was published for k8s.io/kubernetes (Go) Nov 17, 2024
Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue... High Unreviewed
CVE-2024-50305 was published Nov 14, 2024
Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache... High Unreviewed
CVE-2024-38479 was published Nov 14, 2024
Improper input validation in UEFI firmware in some Intel(R) Server Board M10JNP2SB Family may... High Unreviewed
CVE-2024-41167 was published Nov 13, 2024
Improper input validation in some Intel(R) CIP software before version 2.4.10852 may allow a... High Unreviewed
CVE-2024-36482 was published Nov 13, 2024
Improper input validation in the Intel(R) Server Board S2600ST Family BIOS and Firmware Update... High Unreviewed
CVE-2024-36282 was published Nov 13, 2024
Improper input validation in UEFI firmware in some Intel(R) Server Board S2600BP Family may allow... High Unreviewed
CVE-2024-31158 was published Nov 13, 2024
Improper input validation in UEFI firmware for some Intel(R) Server S2600BPBR may allow a... High Unreviewed
CVE-2024-31154 was published Nov 13, 2024
Improper input validation in some Intel(R) Neural Compressor software before version v3.0 may... High Unreviewed
CVE-2024-28028 was published Nov 13, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database