Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,272
Erlang
31
GitHub Actions
21
Go
2,047
Maven
5,000+
npm
3,739
NuGet
668
pip
3,415
Pub
12
RubyGems
891
Rust
868
Swift
36
Unreviewed advisories
All unreviewed
5,000+

315 advisories

Loading
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu... Moderate Unreviewed
CVE-2019-10024 was published May 14, 2022
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bluetooth L2CAP dissector could divide by... High Unreviewed
CVE-2017-9344 was published May 14, 2022
An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3, which does not... Moderate Unreviewed
CVE-2018-13100 was published May 14, 2022
There is floating point exception at caca/dither.c (function caca_dither_bitmap) in libcaca 0.99... Moderate Unreviewed
CVE-2018-20544 was published May 14, 2022
In change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local... Moderate Unreviewed
CVE-2017-18360 was published May 14, 2022
In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function... Moderate Unreviewed
CVE-2017-16942 was published May 14, 2022
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec... Moderate Unreviewed
CVE-2019-10023 was published May 14, 2022
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PSOutputDev:... Moderate Unreviewed
CVE-2019-10019 was published May 14, 2022
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream... Moderate Unreviewed
CVE-2019-10021 was published May 14, 2022
The iwgif_read_image function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows... Moderate Unreviewed
CVE-2017-7962 was published May 13, 2022
imagew-cmd.c:850:46 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause... Moderate Unreviewed
CVE-2017-9201 was published May 13, 2022
imagew-cmd.c:854:45 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause... Moderate Unreviewed
CVE-2017-9202 was published May 13, 2022
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in... Moderate Unreviewed
CVE-2017-5837 was published May 13, 2022
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in... Moderate Unreviewed
CVE-2017-5844 was published May 13, 2022
Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1... High Unreviewed
CVE-2017-0857 was published May 13, 2022
A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to... Moderate Unreviewed
CVE-2017-0603 was published May 13, 2022
In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c.... Moderate Unreviewed
CVE-2018-9018 was published May 13, 2022
** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does... Moderate Unreviewed
CVE-2017-18207 was published May 13, 2022
In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan... High Unreviewed
CVE-2018-19628 was published May 13, 2022
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect,... Moderate Unreviewed
CVE-2017-9239 was published May 13, 2022
The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote... Moderate Unreviewed
CVE-2017-8842 was published May 13, 2022
Netwide Assembler (NASM) 2.14rc0 has a division-by-zero vulnerability in the expr5 function in... Moderate Unreviewed
CVE-2018-10016 was published May 13, 2022
A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during... High Unreviewed
CVE-2017-11464 was published May 13, 2022
libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by... Moderate Unreviewed
CVE-2018-1152 was published May 13, 2022
The ldm_parse_vmdb function in fs/partitions/ldm.c in the Linux kernel before 2.6.38-rc6-git6... Moderate Unreviewed
CVE-2011-1012 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database