GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,249
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+
4,217 advisories
Filter by severity
Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.
Moderate
Unreviewed
CVE-2021-41043
was published
Jan 6, 2022
Possible use after free when process shell memory is freed using IOCTL call and process...
High
Unreviewed
CVE-2021-30337
was published
Jan 4, 2022
Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from...
Moderate
Unreviewed
CVE-2021-45944
was published
Jan 2, 2022
In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different...
Moderate
Unreviewed
CVE-2021-45483
was published
Dec 26, 2021
In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a...
Moderate
Unreviewed
CVE-2021-45482
was published
Dec 26, 2021
Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote...
High
Unreviewed
CVE-2021-38006
was published
Dec 24, 2021
Use after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to...
High
Unreviewed
CVE-2021-38005
was published
Dec 24, 2021
Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote...
High
Unreviewed
CVE-2021-38011
was published
Dec 24, 2021
Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who...
High
Unreviewed
CVE-2021-4052
was published
Dec 24, 2021
Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to...
High
Unreviewed
CVE-2021-4053
was published
Dec 24, 2021
Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who...
High
Unreviewed
CVE-2021-4057
was published
Dec 24, 2021
Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote...
High
Unreviewed
CVE-2021-4063
was published
Dec 24, 2021
Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a...
High
Unreviewed
CVE-2021-4064
was published
Dec 24, 2021
Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...
High
Unreviewed
CVE-2021-4065
was published
Dec 24, 2021
Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a...
High
Unreviewed
CVE-2021-4067
was published
Dec 24, 2021
A use after free issue was addressed with improved memory management. This issue is fixed in...
High
Unreviewed
CVE-2020-3886
was published
Dec 24, 2021
ProTip!
Advisories are also available from the
GraphQL API