Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

203 advisories

Loading
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta... High Unreviewed
CVE-2023-35995 was published Jan 8, 2024
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta... High Unreviewed
CVE-2023-35997 was published Jan 8, 2024
Memory corruption in Kernel while parsing metadata. High Unreviewed
CVE-2023-33053 was published Dec 5, 2023
An out-of-bounds write vulnerability exists within the parsers for both the "DocumentViewStyles"... High Unreviewed
CVE-2023-35126 was published Oct 19, 2023
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application. High Unreviewed
CVE-2023-24850 was published Oct 3, 2023
Memory corruption in WLAN HAL while handling command streams through WMI interfaces. High Unreviewed
CVE-2023-28565 was published Sep 5, 2023
Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload. High Unreviewed
CVE-2023-28557 was published Sep 5, 2023
Memory corruption in WLAN HAL while parsing WMI command parameters. High Unreviewed
CVE-2023-28573 was published Sep 5, 2023
Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART. High Unreviewed
CVE-2023-28548 was published Sep 5, 2023
Memory corruption in WLAN handler while processing PhyID in Tx status handler. High Unreviewed
CVE-2023-28558 was published Sep 5, 2023
Memory corruption in WLAN HAL while handling command through WMI interfaces. High Unreviewed
CVE-2023-28567 was published Sep 5, 2023
Memory corruption due to improper validation of array index in Audio. High Unreviewed
CVE-2022-40534 was published Sep 5, 2023
Memory Corruption due to improper validation of array index in Linux while updating adn record. High Unreviewed
CVE-2023-21636 was published Sep 5, 2023
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum... High Unreviewed
CVE-2022-33275 was published Sep 5, 2023
Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length. High Unreviewed
CVE-2023-21650 was published Aug 8, 2023
Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact... High Unreviewed
CVE-2023-29458 was published Jul 13, 2023
An access violation vulnerability exists in the GraphPlanar::Write functionality of Diagon v1.0... High Unreviewed
CVE-2023-31194 was published Jul 5, 2023
A CWE-129: Improper Validation of Array Index vulnerability exists that could cause local... High Unreviewed
CVE-2023-2570 was published Jun 14, 2023
Improper Validation of Array Index vulnerability in the spreadsheet component of The Document... High Unreviewed
CVE-2023-0950 was published May 25, 2023
Memory corruption due to improper validation of array index in computer vision while testing EVA... High Unreviewed
CVE-2022-33281 was published May 2, 2023
A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a... High Unreviewed
CVE-2023-2008 was published Apr 14, 2023
Memory corruption due to improper validation of array index in User Identity Module when APN TLV... High Unreviewed
CVE-2022-33302 was published Apr 13, 2023
An improper array index validation vulnerability exists in the stl_fix_normal_directions... High Unreviewed
CVE-2022-38072 was published Apr 3, 2023
A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and... High Unreviewed
CVE-2023-20080 was published Mar 23, 2023
Memory corruption in Automotive Android OS due to improper validation of array index. High Unreviewed
CVE-2022-40539 was published Mar 10, 2023
ProTip! Advisories are also available from the GraphQL API