GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
                  
                    
                      
                      All reviewed
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      Composer
                    
                    
                      4,963
                    
                  
                  
                    
                      
                      Erlang
                    
                    
                      39
                    
                  
                  
                    
                      
                      GitHub Actions
                    
                    
                      38
                    
                  
                  
                    
                      
                      Go
                    
                    
                      2,614
                    
                  
                  
                    
                      
                      Maven
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      npm
                    
                    
                      4,254
                    
                  
                  
                    
                      
                      NuGet
                    
                    
                      760
                    
                  
                  
                    
                      
                      pip
                    
                    
                      4,031
                    
                  
                  
                    
                      
                      Pub
                    
                    
                      12
                    
                  
                  
                    
                      
                      RubyGems
                    
                    
                      953
                    
                  
                  
                    
                      
                      Rust
                    
                    
                      1,049
                    
                  
                  
                    
                      
                      Swift
                    
                    
                      45
                    
                  
                  Unreviewed advisories
                  
                    
                      
                      All unreviewed
                    
                    
                      5,000+
                    
                  
            Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
      3,123 advisories
        Filter by severity
        
      
      
    
                    
                      In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-39657
                      
                      was published
                      Dec 16, 2021 
                    
                  
                    
                      A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-44004
                      
                      was published
                      Dec 15, 2021 
                    
                  
                    
                      A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-44008
                      
                      was published
                      Dec 15, 2021 
                    
                  
                    
                      A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-44009
                      
                      was published
                      Dec 15, 2021 
                    
                  
                    
                      A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-44010
                      
                      was published
                      Dec 15, 2021 
                    
                  
                    
                      A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-44012
                      
                      was published
                      Dec 15, 2021 
                    
                  
                    
                      A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-44011
                      
                      was published
                      Dec 15, 2021 
                    
                  
                    
                      A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-44015
                      
                      was published
                      Dec 15, 2021 
                    
                  
                    
                      A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-44017
                      
                      was published
                      Dec 15, 2021 
                    
                  
                    
                      A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-44431
                      
                      was published
                      Dec 15, 2021 
                    
                  
                    
                      A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-44436
                      
                      was published
                      Dec 15, 2021 
                    
                  
                    
                      A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-44444
                      
                      was published
                      Dec 15, 2021 
                    
                  
                    
                      A vulnerability has been identified in JT Utilities (All versions < V13.0.3.0), JTTK (All...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-44448
                      
                      was published
                      Dec 15, 2021 
                    
                  
                    
                      AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2020-36134
                      
                      was published
                      Dec 3, 2021 
                    
                  
                    
                      NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-40154
                      
                      was published
                      Dec 2, 2021 
                    
                  
                    
                      NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-44479
                      
                      was published
                      Dec 2, 2021 
                    
                  
                    
                      Some Huawei products use the OpenHpi software for hardware management. A function that parses...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-39995
                      
                      was published
                      Nov 30, 2021 
                    
                  
                    
                      In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-0620
                      
                      was published
                      Nov 19, 2021 
                    
                  
                    
                      In ape extractor, there is a possible out of bounds read due to a missing bounds check. This...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-0619
                      
                      was published
                      Nov 19, 2021 
                    
                  
                    
                      In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-0665
                      
                      was published
                      Nov 19, 2021 
                    
                  
                    
                      In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-0666
                      
                      was published
                      Nov 19, 2021 
                    
                  
                    
                      Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004203 may lead to...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2020-12904
                      
                      was published
                      Nov 17, 2021 
                    
                  
                    
                      Out-of-bounds Read and Missing Release of Memory after Effective Lifetime in tar
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-20193
                      
                      was published
                      May 27, 2021 
                    
                  
        
        ProTip!
        Advisories are also available from the 
        GraphQL API