Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,825
Erlang
36
GitHub Actions
32
Go
2,417
Maven
5,000+
npm
4,054
NuGet
723
pip
3,845
Pub
12
RubyGems
933
Rust
1,005
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

910 advisories

Loading
An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS... High Unreviewed
CVE-2025-41691 was published Aug 4, 2025
NULL Pointer Dereference in µD3TN via non-singleton destination Endpoint Identifier allows remote... High Unreviewed
CVE-2025-8183 was published Jul 25, 2025
A null pointer dereference vulnerability exists in the net_connectmsg Protocol Buffer Message... High Unreviewed
CVE-2025-36520 was published Jul 22, 2025
A null pointer dereference vulnerability exists in the Distributed Transaction component of... High Unreviewed
CVE-2025-48498 was published Jul 22, 2025
A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message... High Unreviewed
CVE-2025-35966 was published Jul 22, 2025
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks... High Unreviewed
CVE-2025-52984 was published Jul 11, 2025
A flaw was found in libsoup. A NULL pointer dereference vulnerability occurs in libsoup's cookie... High Unreviewed
CVE-2025-7370 was published Jul 10, 2025
Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to... High Unreviewed
CVE-2025-49694 was published Jul 8, 2025
Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges... High Unreviewed
CVE-2025-49686 was published Jul 8, 2025
LuaJIT through 2.1 has an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of... High Unreviewed
CVE-2024-25177 was published Jul 7, 2025
In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL... High Unreviewed
CVE-2025-53603 was published Jul 5, 2025
berkeley-abc abc 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the... High Unreviewed
CVE-2025-45333 was published Jun 26, 2025
vkoskiv c-ray 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the parse_mtllib... High Unreviewed
CVE-2025-45332 was published Jun 26, 2025
An issue was discovered in COROS PACE 3 through 3.0808.0. Due to a NULL pointer dereference... High Unreviewed
CVE-2025-48705 was published Jun 20, 2025
A vulnerability classified as critical was found in RT-Thread 5.1.0. This vulnerability affects... High Unreviewed
CVE-2025-5867 was published Jun 9, 2025
An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. The... High Unreviewed
CVE-2025-23100 was published Jun 3, 2025
MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability. Remote,... High Unreviewed
CVE-2024-54952 was published May 29, 2025
A flaw was found in the gnome-remote-desktop used by Anaconda's remote install feature, where a... High Unreviewed
CVE-2025-4478 was published May 19, 2025
Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges... High Unreviewed
CVE-2025-29838 was published May 13, 2025
A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The... High Unreviewed
CVE-2025-45835 was published May 12, 2025
When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer... High Unreviewed
CVE-2025-41433 was published May 8, 2025
When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can... High Unreviewed
CVE-2025-41414 was published May 8, 2025
A NULL Pointer Dereference in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce... High Unreviewed
CVE-2025-32398 was published May 7, 2025
In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that... High Unreviewed
CVE-2022-21546 was published May 3, 2025
Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local... High Unreviewed
CVE-2025-46400 was published Apr 23, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database