Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,821
Erlang
36
GitHub Actions
32
Go
2,413
Maven
5,000+
npm
4,052
NuGet
723
pip
3,844
Pub
12
RubyGems
933
Rust
1,004
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

910 advisories

Loading
An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS... High Unreviewed
CVE-2025-41691 was published Aug 4, 2025
A flaw was found in the gnome-remote-desktop used by Anaconda's remote install feature, where a... High Unreviewed
CVE-2025-4478 was published May 19, 2025
NULL Pointer Dereference in µD3TN via non-singleton destination Endpoint Identifier allows remote... High Unreviewed
CVE-2025-8183 was published Jul 25, 2025
LuaJIT through 2.1 has an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of... High Unreviewed
CVE-2024-25177 was published Jul 7, 2025
A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message... High Unreviewed
CVE-2025-35966 was published Jul 22, 2025
A null pointer dereference vulnerability exists in the net_connectmsg Protocol Buffer Message... High Unreviewed
CVE-2025-36520 was published Jul 22, 2025
A null pointer dereference vulnerability exists in the Distributed Transaction component of... High Unreviewed
CVE-2025-48498 was published Jul 22, 2025
A vulnerability classified as critical was found in RT-Thread 5.1.0. This vulnerability affects... High Unreviewed
CVE-2025-5867 was published Jun 9, 2025
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks... High Unreviewed
CVE-2025-52984 was published Jul 11, 2025
A flaw was found in libsoup. A NULL pointer dereference vulnerability occurs in libsoup's cookie... High Unreviewed
CVE-2025-7370 was published Jul 10, 2025
Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to... High Unreviewed
CVE-2025-49694 was published Jul 8, 2025
Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges... High Unreviewed
CVE-2025-49686 was published Jul 8, 2025
In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL... High Unreviewed
CVE-2025-53603 was published Jul 5, 2025
berkeley-abc abc 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the... High Unreviewed
CVE-2025-45333 was published Jun 26, 2025
vkoskiv c-ray 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the parse_mtllib... High Unreviewed
CVE-2025-45332 was published Jun 26, 2025
An issue was discovered in COROS PACE 3 through 3.0808.0. Due to a NULL pointer dereference... High Unreviewed
CVE-2025-48705 was published Jun 20, 2025
A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service... High Unreviewed
CVE-2023-6603 was published Dec 31, 2024
Apfloat v1.10.1 was discovered to contain a NullPointerException via the component org.apfloat... High Unreviewed
CVE-2024-23085 was published Apr 8, 2024
A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is... High Unreviewed
CVE-2025-32913 was published Apr 14, 2025
nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20... High Unreviewed
CVE-2018-1000168 was published May 13, 2022
An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. The... High Unreviewed
CVE-2025-23100 was published Jun 3, 2025
In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that... High Unreviewed
CVE-2022-21546 was published May 3, 2025
In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c... High Unreviewed
CVE-2021-38604 was published May 24, 2022
MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability. Remote,... High Unreviewed
CVE-2024-54952 was published May 29, 2025
The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of... High Unreviewed
CVE-2021-39988 was published Jan 4, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database