Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,373
Erlang
33
GitHub Actions
22
Go
2,135
Maven
5,000+
npm
3,797
NuGet
687
pip
3,478
Pub
12
RubyGems
896
Rust
897
Swift
38
Unreviewed advisories
All unreviewed
5,000+

2,253 advisories

Loading
There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(),... Moderate Unreviewed
CVE-2025-0838 was published Feb 21, 2025
In barebox before 2025.01.0, request2size in common/dlmalloc.c has an integer overflow, a related... High Unreviewed
CVE-2024-57261 was published Feb 19, 2025
In barebox before 2025.01.0, ext4fs_read_symlink has an integer overflow for zalloc (adding one... High Unreviewed
CVE-2024-57262 was published Feb 19, 2025
An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted... High Unreviewed
CVE-2024-57255 was published Feb 19, 2025
Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted... High Unreviewed
CVE-2024-57258 was published Feb 19, 2025
An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink... High Unreviewed
CVE-2024-57254 was published Feb 19, 2025
An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc ... High Unreviewed
CVE-2024-57256 was published Feb 19, 2025
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB.... Critical Unreviewed
CVE-2023-34399 was published Feb 14, 2025
Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. ... High Unreviewed
CVE-2024-11347 was published Feb 13, 2025
NVIDIA Triton Inference Server contains a vulnerability in the model loading API, where a user... Moderate Unreviewed
CVE-2024-53880 was published Feb 12, 2025
An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds... Low Unreviewed
CVE-2023-20507 was published Feb 11, 2025
in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through integer overflow. Moderate Unreviewed
CVE-2025-0302 was published Feb 7, 2025
Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security... Moderate Unreviewed
CVE-2024-13614 was published Feb 6, 2025
In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to... High Unreviewed
CVE-2024-34733 was published Jan 28, 2025
An integer overflow was addressed through improved input validation. This issue is fixed in macOS... High Unreviewed
CVE-2025-24156 was published Jan 28, 2025
In the Linux kernel, the following vulnerability has been resolved: net/sctp: Prevent autoclose... Moderate Unreviewed
CVE-2024-57938 was published Jan 21, 2025
In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevent integer... Moderate Unreviewed
CVE-2024-57890 was published Jan 15, 2025
GDI+ Remote Code Execution Vulnerability High Unreviewed
CVE-2025-21338 was published Jan 14, 2025
Windows Telephony Service Remote Code Execution Vulnerability High Unreviewed
CVE-2025-21243 was published Jan 14, 2025
Windows Telephony Service Remote Code Execution Vulnerability High Unreviewed
CVE-2025-21244 was published Jan 14, 2025
An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2... Low Unreviewed
CVE-2024-46669 was published Jan 14, 2025
FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c. Moderate Unreviewed
CVE-2025-23022 was published Jan 10, 2025
FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based... Critical Unreviewed
CVE-2025-23016 was published Jan 10, 2025
An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker... Critical Unreviewed
CVE-2024-40765 was published Jan 9, 2025
Integer overflow vulnerability during glTF model loading in the 3D engine module Impact:... High Unreviewed
CVE-2024-56451 was published Jan 8, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database