Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,333
Erlang
31
GitHub Actions
22
Go
2,095
Maven
5,000+
npm
3,762
NuGet
678
pip
3,447
Pub
12
RubyGems
892
Rust
882
Swift
37
Unreviewed advisories
All unreviewed
5,000+

1,509 advisories

Loading
Windows Hyper-V Denial of Service Vulnerability. Moderate Unreviewed
CVE-2022-21975 was published Mar 10, 2022
Windows DWM Core Library Elevation of Privilege Vulnerability. This CVE ID is unique from CVE... High Unreviewed
CVE-2022-23288 was published Mar 10, 2022
Windows ALPC Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-23287, CVE... High Unreviewed
CVE-2022-23283 was published Mar 10, 2022
Windows NT OS Kernel Elevation of Privilege Vulnerability. High Unreviewed
CVE-2022-23298 was published Mar 10, 2022
Tablet Windows User Interface Application Elevation of Privilege Vulnerability. High Unreviewed
CVE-2022-24460 was published Mar 10, 2022
Windows ALPC Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-23283, CVE... High Unreviewed
CVE-2022-24505 was published Mar 10, 2022
Windows Update Stack Elevation of Privilege Vulnerability. High Unreviewed
CVE-2022-24525 was published Mar 10, 2022
A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found... High Unreviewed
CVE-2021-3640 was published Mar 5, 2022
.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker... High Unreviewed
CVE-2021-3609 was published Mar 4, 2022
The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking... Low Unreviewed
CVE-2022-0279 was published Feb 22, 2022
A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount... High Unreviewed
CVE-2021-44731 was published Feb 19, 2022
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos... High Unreviewed
CVE-2020-25719 was published Feb 19, 2022
A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls... High Unreviewed
CVE-2021-3752 was published Feb 17, 2022
crossbeam-utils Race Condition vulnerability High
CVE-2022-23639 was published for crossbeam-utils (Rust) Feb 16, 2022
saethlin
HashiCorp Nomad Artifact Download Race Condition Moderate
CVE-2022-24686 was published for github.com/hashicorp/nomad (Go) Feb 15, 2022
westonsteimel
gobase subject to Incorrect routing of some HTTP requests when using httpauth due to a race condition Low
GHSA-h2x7-2ff6-v32p was published for github.com/ntbosscher/gobase (Go) Feb 11, 2022
Local privilege escalation due to race condition on application startup. The following products... High Unreviewed
CVE-2022-24114 was published Feb 11, 2022
There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful... Moderate Unreviewed
CVE-2021-40015 was published Feb 11, 2022
In vow driver, there is a possible memory corruption due to a race condition. This could lead to... Moderate Unreviewed
CVE-2022-20032 was published Feb 11, 2022
Improper synchronization in Apache Netbeans HTML/Java API High
CVE-2020-17534 was published for org.netbeans.html:pom (Maven) Feb 9, 2022
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible Low
CVE-2020-10744 was published for ansible (pip) Feb 9, 2022
A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain... High Unreviewed
CVE-2021-4083 was published Jan 19, 2022
NVIDIA Tegra kernel driver contains a vulnerability in NVHost, where a specific race condition... Moderate Unreviewed
CVE-2021-34406 was published Jan 19, 2022
In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a... High Unreviewed
CVE-2021-39629 was published Jan 15, 2022
In init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race... High Unreviewed
CVE-2021-39679 was published Jan 15, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database