GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,262
Erlang
31
GitHub Actions
21
Go
2,024
Maven
5,000+
npm
3,731
NuGet
662
pip
3,407
Pub
12
RubyGems
891
Rust
864
Swift
36
Unreviewed advisories
All unreviewed
5,000+
314 advisories
Filter by severity
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bluetooth L2CAP dissector could divide by...
High
Unreviewed
CVE-2017-9344
was published
May 14, 2022
An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3, which does not...
Moderate
Unreviewed
CVE-2018-13100
was published
May 14, 2022
There is floating point exception at caca/dither.c (function caca_dither_bitmap) in libcaca 0.99...
Moderate
Unreviewed
CVE-2018-20544
was published
May 14, 2022
In change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local...
Moderate
Unreviewed
CVE-2017-18360
was published
May 14, 2022
In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function...
Moderate
Unreviewed
CVE-2017-16942
was published
May 14, 2022
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream...
Moderate
Unreviewed
CVE-2019-10021
was published
May 14, 2022
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PSOutputDev:...
Moderate
Unreviewed
CVE-2019-10019
was published
May 14, 2022
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec...
Moderate
Unreviewed
CVE-2019-10023
was published
May 14, 2022
The iwgif_read_image function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows...
Moderate
Unreviewed
CVE-2017-7962
was published
May 13, 2022
imagew-cmd.c:850:46 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause...
Moderate
Unreviewed
CVE-2017-9201
was published
May 13, 2022
imagew-cmd.c:854:45 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause...
Moderate
Unreviewed
CVE-2017-9202
was published
May 13, 2022
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in...
Moderate
Unreviewed
CVE-2017-5844
was published
May 13, 2022
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in...
Moderate
Unreviewed
CVE-2017-5837
was published
May 13, 2022
Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1...
High
Unreviewed
CVE-2017-0857
was published
May 13, 2022
A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to...
Moderate
Unreviewed
CVE-2017-0603
was published
May 13, 2022
In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c....
Moderate
Unreviewed
CVE-2018-9018
was published
May 13, 2022
** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does...
Moderate
Unreviewed
CVE-2017-18207
was published
May 13, 2022
In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan...
High
Unreviewed
CVE-2018-19628
was published
May 13, 2022
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect,...
Moderate
Unreviewed
CVE-2017-9239
was published
May 13, 2022
The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote...
Moderate
Unreviewed
CVE-2017-8842
was published
May 13, 2022
Netwide Assembler (NASM) 2.14rc0 has a division-by-zero vulnerability in the expr5 function in...
Moderate
Unreviewed
CVE-2018-10016
was published
May 13, 2022
A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during...
High
Unreviewed
CVE-2017-11464
was published
May 13, 2022
libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by...
Moderate
Unreviewed
CVE-2018-1152
was published
May 13, 2022
The ldm_parse_vmdb function in fs/partitions/ldm.c in the Linux kernel before 2.6.38-rc6-git6...
Moderate
Unreviewed
CVE-2011-1012
was published
May 13, 2022
The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not...
Moderate
Unreviewed
CVE-2010-4165
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API