GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,293
Erlang
31
GitHub Actions
21
Go
2,061
Maven
5,000+
npm
3,744
NuGet
668
pip
3,423
Pub
12
RubyGems
892
Rust
875
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
3,124 advisories
Filter by severity
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...
High
Unreviewed
CVE-2021-42385
was published
Nov 17, 2021
Adobe Animate version 21.0.9 (and earlier) are affected by a use-after-free vulnerability in the...
High
Unreviewed
CVE-2021-42269
was published
Nov 19, 2021
In apusys, there is a possible memory corruption due to a use after free. This could lead to...
High
Unreviewed
CVE-2021-0670
was published
Nov 19, 2021
In mdlactl driver, there is a possible memory corruption due to a use after free. This could lead...
High
Unreviewed
CVE-2021-0629
was published
Nov 19, 2021
Use after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who...
High
Unreviewed
CVE-2021-37997
was published
Nov 24, 2021
A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance...
High
Unreviewed
CVE-2021-44047
was published
Dec 6, 2021
Failure to correctly record the location of live pointers across wasm instance calls resulted in...
High
Unreviewed
CVE-2021-43539
was published
Dec 9, 2021
A use-after-free could have occured when an HTTP2 session object was released on a different...
High
Unreviewed
CVE-2021-43535
was published
Dec 9, 2021
A vulnerability has been identified in JT Utilities (All versions < V13.0.3.0), JTTK (All...
High
Unreviewed
CVE-2021-44447
was published
Dec 15, 2021
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All...
High
Unreviewed
CVE-2021-44433
was published
Dec 15, 2021
A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization...
High
Unreviewed
CVE-2021-44014
was published
Dec 15, 2021
In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use...
High
Unreviewed
CVE-2021-1048
was published
Dec 16, 2021
In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt...
High
Unreviewed
CVE-2021-0929
was published
Dec 16, 2021
A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through...
High
Unreviewed
CVE-2021-44733
was published
Dec 23, 2021
A use after free issue was addressed with improved memory management. This issue is fixed in...
High
Unreviewed
CVE-2020-3886
was published
Dec 24, 2021
Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a...
High
Unreviewed
CVE-2021-4067
was published
Dec 24, 2021
Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...
High
Unreviewed
CVE-2021-4065
was published
Dec 24, 2021
Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote...
High
Unreviewed
CVE-2021-4063
was published
Dec 24, 2021
Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a...
High
Unreviewed
CVE-2021-4064
was published
Dec 24, 2021
Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who...
High
Unreviewed
CVE-2021-4057
was published
Dec 24, 2021
Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to...
High
Unreviewed
CVE-2021-4053
was published
Dec 24, 2021
Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who...
High
Unreviewed
CVE-2021-4052
was published
Dec 24, 2021
Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote...
High
Unreviewed
CVE-2021-38011
was published
Dec 24, 2021
ProTip!
Advisories are also available from the
GraphQL API