Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,904
Erlang
38
GitHub Actions
38
Go
2,566
Maven
5,000+
npm
4,237
NuGet
753
pip
4,001
Pub
12
RubyGems
953
Rust
1,042
Swift
45
Unreviewed advisories
All unreviewed
5,000+

62 advisories

Loading
The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat... High Unreviewed
CVE-2013-4253 was published Oct 19, 2022
In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a... Moderate Unreviewed
CVE-2017-20147 was published Sep 21, 2022
ansible-runner vulnerable to Race Condition Moderate
CVE-2021-3702 was published for ansible-runner (pip) Aug 24, 2022
Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot High
CVE-2022-27772 was published for org.springframework.boot:spring-boot (Maven) Jul 11, 2022
trgpa JLLeitschuh
Credited to trgpa and JLLeitschuh
A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5,... Low Unreviewed
CVE-2021-25316 was published May 24, 2022
A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows... High Unreviewed
CVE-2020-8032 was published May 24, 2022
A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS,... Moderate Unreviewed
CVE-2020-8027 was published May 24, 2022
A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers... Moderate Unreviewed
CVE-2020-8030 was published May 24, 2022
phpMyAdmin unsafely handles temporary files High
CVE-2008-7252 was published for phpmyadmin/phpmyadmin (Composer) May 17, 2022
Insecure Temporary File in Jinja2 Moderate
CVE-2014-0012 was published for Jinja2 (pip) May 17, 2022
RPLY Predictable Tmpfile Names Allows Cache Spoofing Low
CVE-2014-1604 was published for RPLY (pip) May 17, 2022
Puppet uses predictable filenames, allowing arbitrary file overwrite Moderate
CVE-2012-1906 was published for puppet (RubyGems) May 14, 2022
It was found that rhnsd PID files are created as world-writable that allows local attackers to... Moderate Unreviewed
CVE-2017-7560 was published May 13, 2022
instack-undercloud vulnerable to symlink attack on tmp files Moderate
CVE-2017-7549 was published for instack-undercloud (pip) May 13, 2022
ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name Low
CVE-2013-0162 was published for ruby_parser (RubyGems) May 5, 2022
golang/go in 1.0.2 fixes all.bash on shared machines. dotest() in src/pkg/debug/gosym... Critical Unreviewed
CVE-2012-2666 was published Apr 23, 2022
Hadoop symlink vulnerability High
CVE-2012-2945 was published for org.apache.hadoop:hadoop-main (Maven) Apr 23, 2022
caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make... Critical Unreviewed
CVE-2011-4119 was published Apr 22, 2022
Insecure Temporary File in SWHKD Critical
CVE-2022-27815 was published for Simple-Wayland-HotKey-Daemon (Rust) Mar 31, 2022
Shinyzenith
Credited to Shinyzenith
Use of insecure temporary file in Horovod High
CVE-2022-0315 was published for horovod (pip) Mar 29, 2022
JamieSlome ashahab
Credited to JamieSlome and ashahab
Temporary Directory Hijacking Vulnerability in Keycloak High
CVE-2021-20202 was published for org.keycloak:keycloak-core (Maven) Mar 18, 2022
JLLeitschuh
Credited to JLLeitschuh
A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15... Moderate Unreviewed
CVE-2021-46705 was published Mar 17, 2022
A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to... Moderate Unreviewed
CVE-2022-21945 was published Mar 17, 2022
Insecure Temporary File in mlflow High
CVE-2022-0736 was published for mlflow (pip) Feb 24, 2022
Hub Package Arbitrary File Overwrite Moderate
CVE-2014-0177 was published for github.com/github/hub (RubyGems) Feb 15, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database