Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

542 advisories

Loading
Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local... High Unreviewed
CVE-2024-45679 was published Sep 18, 2024
Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote... High Unreviewed
CVE-2024-8905 was published Sep 17, 2024
Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2024-43756 was published Sep 13, 2024
After Effects versions 23.6.6, 24.5 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2024-39380 was published Sep 13, 2024
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker... High Unreviewed
CVE-2024-8636 was published Sep 11, 2024
Kernel Streaming Service Driver Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-38238 was published Sep 10, 2024
Kernel Streaming Service Driver Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-38242 was published Sep 10, 2024
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-38237 was published Sep 10, 2024
Windows TCP/IP Remote Code Execution Vulnerability High Unreviewed
CVE-2024-38045 was published Sep 10, 2024
Windows TCP/IP Remote Code Execution Vulnerability High Unreviewed
CVE-2024-21416 was published Sep 10, 2024
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability High Unreviewed
CVE-2024-26191 was published Sep 10, 2024
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability High Unreviewed
CVE-2024-37335 was published Sep 10, 2024
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker... High Unreviewed
CVE-2024-8198 was published Aug 29, 2024
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker... High Unreviewed
CVE-2024-8193 was published Aug 29, 2024
Buffer Overflow vulnerability in open source exiftags v.1.01 allows a local attacker to execute... High Unreviewed
CVE-2024-42851 was published Aug 27, 2024
Heap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker... High Unreviewed
CVE-2024-7973 was published Aug 21, 2024
Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker... High Unreviewed
CVE-2024-7967 was published Aug 21, 2024
Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to... High Unreviewed
CVE-2024-39825 was published Aug 14, 2024
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer... High Unreviewed
CVE-2024-41853 was published Aug 14, 2024
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer... High Unreviewed
CVE-2024-41850 was published Aug 14, 2024
Microsoft Excel Remote Code Execution Vulnerability High Unreviewed
CVE-2024-38172 was published Aug 13, 2024
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability High Unreviewed
CVE-2024-38120 was published Aug 13, 2024
Windows IP Routing Management Snapin Remote Code Execution Vulnerability High Unreviewed
CVE-2024-38115 was published Aug 13, 2024
Windows IP Routing Management Snapin Remote Code Execution Vulnerability High Unreviewed
CVE-2024-38116 was published Aug 13, 2024
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability High Unreviewed
CVE-2024-38121 was published Aug 13, 2024
ProTip! Advisories are also available from the GraphQL API