Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,266
Erlang
31
GitHub Actions
21
Go
2,035
Maven
5,000+
npm
3,732
NuGet
662
pip
3,413
Pub
12
RubyGems
891
Rust
865
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

4,490 advisories

Loading
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality... Moderate Unreviewed
CVE-2021-44416 was published Jan 29, 2022
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality... Moderate Unreviewed
CVE-2021-44407 was published Jan 29, 2022
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality... Moderate Unreviewed
CVE-2021-44418 was published Jan 29, 2022
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality... Moderate Unreviewed
CVE-2021-44419 was published Jan 29, 2022
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality... Moderate Unreviewed
CVE-2021-44412 was published Jan 29, 2022
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality... Moderate Unreviewed
CVE-2021-44414 was published Jan 29, 2022
On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP APM portal access is... Moderate Unreviewed
CVE-2022-23014 was published Jan 26, 2022
An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user... Moderate Unreviewed
CVE-2021-45226 was published Jan 25, 2022
An issue was discovered in COINS Construction Cloud 11.12. Due to insufficient input... Moderate Unreviewed
CVE-2021-45223 was published Jan 25, 2022
An Improper Input Validation vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper... Moderate Unreviewed
CVE-2022-22163 was published Jan 20, 2022
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol... Moderate Unreviewed
CVE-2022-22166 was published Jan 20, 2022
An Improper Validation of Syntactic Correctness of Input vulnerability in the Juniper DHCP daemon... Moderate Unreviewed
CVE-2022-22176 was published Jan 20, 2022
A Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the... Moderate Unreviewed
CVE-2022-22179 was published Jan 20, 2022
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3... Moderate Unreviewed
CVE-2022-0124 was published Jan 19, 2022
GPAC v1.1.0 was discovered to contain an invalid call in the function gf_node_changed(). This... Moderate Unreviewed
CVE-2021-45763 was published Jan 15, 2022
AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a... Moderate Unreviewed
CVE-2021-43762 was published Jan 14, 2022
A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1... Moderate Unreviewed
CVE-2022-22271 was published Jan 11, 2022
In wifi driver, there is a possible system crash due to a missing validation check. This could... Moderate Unreviewed
CVE-2021-41789 was published Jan 5, 2022
In vow driver, there is a possible memory corruption due to improper input validation. This could... Moderate Unreviewed
CVE-2022-20014 was published Jan 5, 2022
Improper input validation in TrustZone memory transfer interface can lead to information... Moderate Unreviewed
CVE-2021-30278 was published Jan 4, 2022
Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does... Moderate Unreviewed
CVE-2021-43548 was published Dec 28, 2021
Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote... Moderate Unreviewed
CVE-2021-4059 was published Dec 24, 2021
Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a... Moderate Unreviewed
CVE-2021-4068 was published Dec 24, 2021
In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This... Moderate Unreviewed
CVE-2021-0674 was published Dec 18, 2021
In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could... Moderate Unreviewed
CVE-2021-0900 was published Dec 18, 2021
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database