Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,272
Erlang
31
GitHub Actions
21
Go
2,047
Maven
5,000+
npm
3,739
NuGet
668
pip
3,415
Pub
12
RubyGems
891
Rust
868
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

186 advisories

Loading
A denial of service vulnerability exists in the ASDU message processing functionality of MZ... High Unreviewed
CVE-2021-21778 was published May 24, 2022
In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a... High Unreviewed
CVE-2021-25218 was published May 24, 2022
FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df05e1640) suffers from a an assertion... High Unreviewed
CVE-2021-38291 was published May 24, 2022
A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance (ASA)... High Unreviewed
CVE-2021-1422 was published May 24, 2022
** UNSUPPORTED WHEN ASSIGNED ** Polipo through 1.1.1 allows denial of service via a reachable... High Unreviewed
CVE-2020-36420 was published May 24, 2022
An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement... High Unreviewed
CVE-2021-1887 was published May 24, 2022
Possible assertion due to improper verification while creating and deleting the peer in... High Unreviewed
CVE-2021-1938 was published May 24, 2022
Improper handling of received malformed FTMR request frame can lead to reachable assertion while... High Unreviewed
CVE-2021-1953 was published May 24, 2022
Denial of service in SAP case due to improper handling of connections when association is... High Unreviewed
CVE-2021-1955 was published May 24, 2022
There is an Assertion 'context.status_flags & PARSER_SCANNING_SUCCESSFUL' failed at js-parser.c... High Unreviewed
CVE-2020-23312 was published May 24, 2022
There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type ==... High Unreviewed
CVE-2020-23311 was published May 24, 2022
There is an Assertion 'context_p->stack_depth == context_p->context_stack_depth' failed at js... High Unreviewed
CVE-2020-23309 was published May 24, 2022
There is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at... High Unreviewed
CVE-2020-23310 was published May 24, 2022
There is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_START' at js-parser-expr.c... High Unreviewed
CVE-2020-23308 was published May 24, 2022
There is an Assertion in 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type ==... High Unreviewed
CVE-2020-23322 was published May 24, 2022
There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' in... High Unreviewed
CVE-2020-23320 was published May 24, 2022
There is an Assertion 'scope_stack_p > context_p->scope_stack_p' failed at js-scanner-util.c:2510... High Unreviewed
CVE-2020-23313 was published May 24, 2022
There is an Assertion 'block_found' failed at js-parser-statm.c:2003... High Unreviewed
CVE-2020-23314 was published May 24, 2022
There is an Assertion in '(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE || ... High Unreviewed
CVE-2020-23319 was published May 24, 2022
Reachable assertion is possible while processing peer association WLAN message from host and... High Unreviewed
CVE-2021-1937 was published May 24, 2022
OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user... High Unreviewed
CVE-2020-36382 was published May 24, 2022
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a... High Unreviewed
CVE-2020-25710 was published May 24, 2022
In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can... High Unreviewed
CVE-2021-28905 was published May 24, 2022
Histogram type KPI was teardown with the assumption of the existence of histogram binning info... High Unreviewed
CVE-2020-11273 was published May 24, 2022
Denial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto,... High Unreviewed
CVE-2020-11274 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database