GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,825
Erlang
36
GitHub Actions
32
Go
2,416
Maven
5,000+
npm
4,054
NuGet
723
pip
3,845
Pub
12
RubyGems
933
Rust
1,005
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
87 advisories
Filter by severity
NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker...
Critical
Unreviewed
CVE-2025-23317
was published
Aug 6, 2025
Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker...
Critical
Unreviewed
CVE-2025-47981
was published
Jul 8, 2025
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...
Critical
Unreviewed
CVE-2025-20686
was published
Jul 8, 2025
In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check....
Critical
Unreviewed
CVE-2025-20680
was published
Jul 8, 2025
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...
Critical
Unreviewed
CVE-2025-20685
was published
Jul 8, 2025
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper...
Critical
Unreviewed
CVE-2024-12084
was published
Jan 15, 2025
A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote...
Critical
Unreviewed
CVE-2025-20260
was published
Jun 18, 2025
Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker...
Critical
Unreviewed
CVE-2024-1283
was published
Feb 7, 2024
Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered...
Critical
Unreviewed
CVE-2025-47868
was published
Jun 16, 2025
Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (C...
Critical
Unreviewed
CVE-2021-20587
was published
May 24, 2022
In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check....
Critical
Unreviewed
CVE-2025-20672
was published
Jun 2, 2025
An integer overflow in WhatsApp could result in remote code execution in an established video call.
Critical
Unreviewed
CVE-2022-36934
was published
Sep 23, 2022
The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior...
Critical
Unreviewed
CVE-2021-24042
was published
Jan 5, 2022
Medtronic MyCareLink Smart 25000 all versions are vulnerable when an attacker who gains auth runs...
Critical
Unreviewed
CVE-2020-25187
was published
May 24, 2022
mruby is vulnerable to Heap-based Buffer Overflow
Critical
Unreviewed
CVE-2022-0080
was published
Jan 3, 2022
A malicious actor with access to the management network could execute a remote code execution ...
Critical
Unreviewed
CVE-2025-23123
was published
May 19, 2025
A Heap Overflow vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3...
Critical
Unreviewed
CVE-2024-29204
was published
Apr 19, 2024
A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the...
Critical
Unreviewed
CVE-2024-4323
was published
May 20, 2024
Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to...
Critical
Unreviewed
CVE-2017-7555
was published
May 17, 2022
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in...
Critical
Unreviewed
CVE-2024-32615
was published
May 14, 2024
A Heap overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3...
Critical
Unreviewed
CVE-2024-24996
was published
Apr 19, 2024
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC...
Critical
Unreviewed
CVE-2024-37080
was published
Jun 18, 2024
This vulnerability allows remote attackers to execute arbitrary code on affected installations of...
Critical
Unreviewed
CVE-2022-2848
was published
Mar 29, 2023
A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston...
Critical
Unreviewed
CVE-2023-45318
was published
Feb 20, 2024
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via...
Critical
Unreviewed
CVE-2019-3568
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API