Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,826
Erlang
36
GitHub Actions
32
Go
2,426
Maven
5,000+
npm
4,058
NuGet
723
pip
3,848
Pub
12
RubyGems
934
Rust
1,006
Swift
38
Unreviewed advisories
All unreviewed
5,000+

10 advisories

Loading
Duplicate Advisory: Unauthenticated Nonce Increment in snow Low
GHSA-97f8-h76h-f297 was published for snow (Rust) Jul 28, 2025 • withdrawn
hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue... Moderate Unreviewed
CVE-2025-54566 was published Jul 25, 2025
An issue has been discovered in GitLab EE/CE affecting all versions from 16.9.7 prior to 17.1.7,... Moderate Unreviewed
CVE-2024-8754 was published Sep 12, 2024
External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000... Moderate Unreviewed
CVE-2024-22387 was published Jul 11, 2024
On Unix platforms, the Go runtime does not behave differently when a binary is run with the... High Unreviewed
CVE-2023-29403 was published Jun 8, 2023
External Control of Critical State Data, Improper Control of Generation of Code ('Code Injection'... Critical Unreviewed
CVE-2023-0575 was published Feb 9, 2023
A logic issue was addressed with improved state management. This issue is fixed in iOS 16.... Moderate Unreviewed
CVE-2022-32859 was published Nov 2, 2022
A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to... High Unreviewed
CVE-2018-15382 was published May 13, 2022
In a Junos Fusion scenario an External Control of Critical State Data vulnerability in the... Moderate Unreviewed
CVE-2022-22154 was published Jan 20, 2022
Bypassing Sanitization using DOM clobbering in html-janitor Moderate
CVE-2017-0928 was published for html-janitor (npm) Jul 24, 2018
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database