GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,801
Erlang
36
GitHub Actions
29
Go
2,380
Maven
5,000+
npm
4,010
NuGet
720
pip
3,810
Pub
12
RubyGems
930
Rust
986
Swift
38
Unreviewed advisories
All unreviewed
5,000+
1,266 advisories
Filter by severity
Core FTP / SFTP Server v2 Build 725 was discovered to allow unauthenticated attackers to cause a...
Moderate
Unreviewed
CVE-2022-22899
was published
Feb 18, 2022
A segmentation fault during PCF file parsing in pcf2bdf versions >=1.05 allows an attacker to...
Moderate
Unreviewed
CVE-2022-23319
was published
Feb 18, 2022
Nomad Spread Job Stanza May Trigger Panic in Servers
Moderate
CVE-2022-24684
was published
for
github.com/hashicorp/nomad
(Go)
Feb 16, 2022
Denial of Service (DoS) in HashiCorp Consul
Moderate
CVE-2020-12758
was published
for
github.com/hashicorp/consul
(Go)
Feb 15, 2022
Denial of service in Grafana
Moderate
CVE-2021-27358
was published
for
github.com/grafana/grafana
(Go)
Feb 15, 2022
Kubernetes API Server DoS Via API Requests
Moderate
CVE-2020-8552
was published
for
k8s.io/apiserver
(Go)
Feb 15, 2022
Improper access control in the firmware for some Intel(R) Processors may allow a privileged user...
Moderate
Unreviewed
CVE-2021-0092
was published
Feb 11, 2022
Memory exhaustion in Tensorflow
Moderate
CVE-2022-21733
was published
for
tensorflow
(pip)
Feb 10, 2022
Memory exhaustion in Tensorflow
Moderate
CVE-2022-21732
was published
for
tensorflow
(pip)
Feb 10, 2022
Windows User Account Profile Picture Denial of Service Vulnerability.
Moderate
Unreviewed
CVE-2022-22002
was published
Feb 10, 2022
Windows Hyper-V Denial of Service Vulnerability.
Moderate
Unreviewed
CVE-2022-22712
was published
Feb 10, 2022
Windows Common Log File System Driver Denial of Service Vulnerability.
Moderate
Unreviewed
CVE-2022-22710
was published
Feb 10, 2022
Abort caused by allocating a vector that is too large in Tensorflow
Moderate
CVE-2022-23580
was published
for
tensorflow
(pip)
Feb 7, 2022
save_window_function_values in MariaDB before 10.6.3 allows an application crash because of...
Moderate
Unreviewed
CVE-2021-46658
was published
Jan 31, 2022
get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses...
Moderate
Unreviewed
CVE-2021-46657
was published
Jan 31, 2022
Denial of Service Vulnerability in next.js
Moderate
CVE-2022-21721
was published
for
next
(npm)
Jan 28, 2022
Denial of Service in graphql-go
Moderate
CVE-2022-21708
was published
for
github.com/graph-gophers/graphql-go
(Go)
Jan 27, 2022
On BIG-IP version 16.1.x before 16.1.2.1, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all...
Moderate
Unreviewed
CVE-2022-23023
was published
Jan 26, 2022
On version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions...
Moderate
Unreviewed
CVE-2022-23030
was published
Jan 26, 2022
Memory leak in micronaut-core
Moderate
CVE-2022-21700
was published
for
io.micronaut:micronaut-http
(Maven)
Jan 21, 2022
Due to the lack of media file checks before rendering, it was possible for an attacker to cause...
Moderate
Unreviewed
CVE-2022-22820
was published
Jan 21, 2022
An Uncontrolled Resource Consumption vulnerability in the handling of IPv6 neighbor state change...
Moderate
Unreviewed
CVE-2022-22155
was published
Jan 20, 2022
Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it...
Moderate
Unreviewed
CVE-2021-37865
was published
Jan 19, 2022
A denial of service vulnerability in GitLab CE/EE affecting all versions starting from 12.0...
Moderate
Unreviewed
CVE-2021-39942
was published
Jan 19, 2022
Uncontrolled Resource Consumption in markdown-it
Moderate
CVE-2022-21670
was published
for
markdown-it
(npm)
Jan 12, 2022
ProTip!
Advisories are also available from the
GraphQL API