GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,717
Maven
5,000+
npm
4,328
NuGet
761
pip
4,105
Pub
12
RubyGems
958
Rust
1,065
Swift
45
Unreviewed advisories
All unreviewed
5,000+
954 advisories
Filter by severity
A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5...
Moderate
Unreviewed
CVE-2021-28964
was published
May 24, 2022
Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a...
Moderate
Unreviewed
CVE-2019-5840
was published
May 24, 2022
Description: A race condition was addressed with additional validation. This issue is fixed in...
Moderate
Unreviewed
CVE-2022-26690
was published
May 27, 2022
A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6,...
Moderate
Unreviewed
CVE-2022-26765
was published
May 27, 2022
In decrypt of CryptoPlugin.cpp, there is a possible use-after-free due to a race condition. This...
Moderate
Unreviewed
CVE-2021-0564
was published
May 24, 2022
Concurrent Execution using Shared Resource with Improper Synchronization in Elasticsearch
Moderate
CVE-2019-7614
was published
for
org.elasticsearch:elasticsearch
(Maven)
May 24, 2022
Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security
Moderate
CVE-2011-2731
was published
for
org.springframework.security:spring-security-core
(Maven)
May 17, 2022
FreeBSD's crontab calculates the MD5 sum of the previous and new cronjob to determine if any...
Moderate
Unreviewed
CVE-2011-1075
was published
Apr 22, 2022
In SUB2AF, there is a possible memory corruption due to a race condition. This could lead to...
Moderate
Unreviewed
CVE-2022-20080
was published
Apr 12, 2022
A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE...
Moderate
Unreviewed
CVE-2022-27481
was published
Apr 13, 2022
In vow, there is a possible memory corruption due to a race condition. This could lead to local...
Moderate
Unreviewed
CVE-2022-20077
was published
Apr 12, 2022
In vow, there is a possible memory corruption due to a race condition. This could lead to local...
Moderate
Unreviewed
CVE-2022-20078
was published
Apr 12, 2022
In eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is...
Moderate
Unreviewed
CVE-2021-39727
was published
Mar 17, 2022
In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read...
Moderate
Unreviewed
CVE-2021-39792
was published
Mar 17, 2022
In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due...
Moderate
Unreviewed
CVE-2021-39735
was published
Mar 17, 2022
cookie-signature Timing Attack
Moderate
CVE-2016-1000236
was published
for
cookie-signature
(npm)
Jan 6, 2020
Multiple memory safety issues in actix-web
Moderate
GHSA-w65j-g6c7-g3m4
was published
for
actix-web
(Rust)
Aug 25, 2021
Queue<T> should have a Send bound on its Send/Sync traits
Moderate
GHSA-v42f-j8fx-99f3
was published
for
scottqueue
(Rust)
Aug 25, 2021
•
withdrawn
Data races in generator
Moderate
GHSA-h6gg-fvf5-qgwf
was published
for
generator
(Rust)
Aug 25, 2021
•
withdrawn
MvccRwLock allows data races & aliasing violations
Moderate
GHSA-mgg8-9pvp-6qcw
was published
for
noise_search
(Rust)
Aug 25, 2021
•
withdrawn
Data races in unicycle
Moderate
GHSA-7mg7-m5c3-3hqj
was published
for
unicycle
(Rust)
Aug 25, 2021
•
withdrawn
Singleton lacks bounds on Send and Sync.
Moderate
GHSA-vj88-5667-w56p
was published
for
ruspiro-singleton
(Rust)
Aug 25, 2021
•
withdrawn
Send/Sync bound needed on T for Send/Sync impl of RcuCell<T>
Moderate
GHSA-jh2g-xhqq-x4w9
was published
for
rcu_cell
(Rust)
Aug 25, 2021
•
withdrawn
ProTip!
Advisories are also available from the
GraphQL API