GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,293
Erlang
31
GitHub Actions
21
Go
2,061
Maven
5,000+
npm
3,744
NuGet
668
pip
3,423
Pub
12
RubyGems
892
Rust
875
Swift
36
Unreviewed advisories
All unreviewed
5,000+
12 advisories
Filter by severity
CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data
High
GHSA-p7mv-53f2-4cwj
was published
for
github.com/cometbft/cometbft
(Go)
Nov 6, 2024
audify vulnerable to Improper Validation of Array Index
High
CVE-2024-21522
was published
for
audify
(npm)
Jul 10, 2024
ADMesh improper array index validation
High
CVE-2022-38072
was published
for
admesh
(pip)
Apr 3, 2023
Improper Validation of Array Index in GJSON
High
CVE-2020-36067
was published
for
github.com/tidwall/gjson
(Go)
Feb 6, 2023
`libsqlite3-sys` via C SQLite improperly validates array index
High
CVE-2022-35737
was published
for
libsqlite3-sys
(Rust)
Aug 4, 2022
Go Ethereum LES protocol implementation vulnerable to Denial of Service
High
CVE-2018-12018
was published
for
github.com/ethereum/go-ethereum
(Go)
May 14, 2022
golang.org/x/net/html Improper Validation of Array Index vulnerability
High
CVE-2018-17848
was published
for
golang.org/x/net
(Go)
May 13, 2022
Improper Input Validation in GoGo Protobuf
High
CVE-2021-3121
was published
for
github.com/gogo/protobuf
(Go)
Mar 28, 2022
Array size is not checked in sized-chunks
High
CVE-2020-25792
was published
for
sized-chunks
(Rust)
Aug 25, 2021
Unaligned references in sized-chunks
High
CVE-2020-25796
was published
for
sized-chunks
(Rust)
Aug 25, 2021
Array size is not checked in sized-chunks
High
CVE-2020-25791
was published
for
sized-chunks
(Rust)
Aug 25, 2021
Array size is not checked in sized-chunks
High
CVE-2020-25793
was published
for
sized-chunks
(Rust)
Aug 25, 2021
ProTip!
Advisories are also available from the
GraphQL API