Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,272
Erlang
31
GitHub Actions
21
Go
2,047
Maven
5,000+
npm
3,739
NuGet
668
pip
3,415
Pub
12
RubyGems
891
Rust
868
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

357 advisories

Loading
JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in... Moderate Unreviewed
CVE-2022-40755 was published Sep 17, 2022
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component... Moderate Unreviewed
CVE-2022-38496 was published Sep 14, 2022
Assertion fail in the display_debug_names() function in binutils/dwarf.c may lead to program... Moderate Unreviewed
CVE-2022-38126 was published Sep 2, 2022
A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at... Moderate Unreviewed
CVE-2022-2520 was published Sep 1, 2022
Mikrotik RouterOs through stable v6.48.3 was discovered to contain an assertion failure in the... Moderate Unreviewed
CVE-2022-36522 was published Aug 27, 2022
In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was... Moderate Unreviewed
CVE-2022-2719 was published Aug 11, 2022
The assertion `stmt->Dbc->FirstStmt' failed in MonetDB Database Server v11.43.13. High Unreviewed
CVE-2022-34967 was published Aug 4, 2022
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() =... High Unreviewed
CVE-2022-32082 was published Jul 2, 2022
Ethereum Solidity v0.8.14 contains an assertion failure via SMTEncoder::indexOrMemberAssignment()... Moderate Unreviewed
CVE-2022-33069 was published Jun 24, 2022
There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int,... High Unreviewed
CVE-2022-33024 was published Jun 24, 2022
libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init() in render_pipeline... Moderate Unreviewed
CVE-2022-34000 was published Jun 20, 2022
Improper handling of writes to virtual GICR control can lead to assertion failure in the... Moderate Unreviewed
CVE-2021-35101 was published Jun 15, 2022
Possible assertion due to improper validation of rank restriction field in Snapdragon Auto,... High Unreviewed
CVE-2021-35073 was published Jun 15, 2022
Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in... High Unreviewed
CVE-2021-30340 was published Jun 15, 2022
There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in... Moderate Unreviewed
CVE-2022-32978 was published Jun 11, 2022
In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a. High Unreviewed
CVE-2022-31651 was published May 26, 2022
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be... High Unreviewed
CVE-2020-25709 was published May 24, 2022
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be... High Unreviewed
CVE-2020-20178 was published May 24, 2022
An authorized user may trigger an invariant which may result in denial of service or server exit... Moderate Unreviewed
CVE-2021-32037 was published May 24, 2022
Possible denial of service scenario due to improper input validation of received NAS OTA message... High Unreviewed
CVE-2021-1982 was published May 24, 2022
A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure... High Unreviewed
CVE-2021-33600 was published May 24, 2022
Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon... High Unreviewed
CVE-2021-1971 was published May 24, 2022
Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature... High Unreviewed
CVE-2021-38385 was published May 24, 2022
libjxl v0.5.0 is affected by a Assertion failed issue in lib/jxl/image.cc jxl::PlaneBase:... High Unreviewed
CVE-2021-36691 was published May 24, 2022
Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in... High Unreviewed
CVE-2021-40083 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database