GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,361
Erlang
33
GitHub Actions
22
Go
2,127
Maven
5,000+
npm
3,794
NuGet
685
pip
3,473
Pub
12
RubyGems
895
Rust
894
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
17 advisories
Filter by severity
In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON...
Low
Unreviewed
CVE-2019-9455
was published
May 24, 2022
PackageKit provided detailed error messages to unprivileged callers that exposed information...
Low
Unreviewed
CVE-2020-16121
was published
May 24, 2022
The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal...
Low
Unreviewed
CVE-2020-16128
was published
May 24, 2022
If exploited, this vulnerability could allow attackers to gain sensitive information via...
Low
Unreviewed
CVE-2020-2505
was published
May 24, 2022
Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are...
Low
Unreviewed
CVE-2019-18947
was published
May 24, 2022
Generation of Error Message Containing Sensitive Information vulnerability in Hitachi JP1...
Low
Unreviewed
CVE-2022-34881
was published
Dec 6, 2022
IBM Security Verify Directory 10.0.0 could allow a remote attacker to obtain sensitive...
Low
Unreviewed
CVE-2022-32756
was published
Mar 22, 2024
An issue has been discovered in GitLab affecting all versions starting with 7.1. A member of a...
Low
Unreviewed
CVE-2021-22193
was published
May 24, 2022
In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the...
Low
Unreviewed
CVE-2023-34339
was published
Jun 1, 2023
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote attacker to obtain...
Low
Unreviewed
CVE-2023-23474
was published
May 3, 2024
An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the...
Low
Unreviewed
CVE-2024-3454
was published
Jul 24, 2024
In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML...
Low
Unreviewed
CVE-2024-5250
was published
Jul 30, 2024
HCL Sametime is impacted by the error messages containing sensitive information. An attacker can...
Low
Unreviewed
CVE-2023-50355
was published
Oct 24, 2024
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote...
Low
Unreviewed
CVE-2021-20455
was published
Jan 7, 2025
IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote...
Low
Unreviewed
CVE-2024-45658
was published
Feb 4, 2025
IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed...
Low
Unreviewed
CVE-2024-56467
was published
Feb 6, 2025
The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error...
Low
Unreviewed
CVE-2024-52611
was published
Feb 11, 2025
ProTip!
Advisories are also available from the
GraphQL API