GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
                  
                    
                      
                      All reviewed
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      Composer
                    
                    
                      4,968
                    
                  
                  
                    
                      
                      Erlang
                    
                    
                      39
                    
                  
                  
                    
                      
                      GitHub Actions
                    
                    
                      38
                    
                  
                  
                    
                      
                      Go
                    
                    
                      2,616
                    
                  
                  
                    
                      
                      Maven
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      npm
                    
                    
                      4,255
                    
                  
                  
                    
                      
                      NuGet
                    
                    
                      760
                    
                  
                  
                    
                      
                      pip
                    
                    
                      4,040
                    
                  
                  
                    
                      
                      Pub
                    
                    
                      12
                    
                  
                  
                    
                      
                      RubyGems
                    
                    
                      953
                    
                  
                  
                    
                      
                      Rust
                    
                    
                      1,050
                    
                  
                  
                    
                      
                      Swift
                    
                    
                      45
                    
                  
                  Unreviewed advisories
                  
                    
                      
                      All unreviewed
                    
                    
                      5,000+
                    
                  
            25 advisories
        Filter by severity
        
      
      
    
                    
                      crossbeam-deque Data Race before v0.7.4 and v0.8.1
                    
                      
  Critical
                    
                
                      
                        CVE-2021-32810
                      
                      was published
                        for
                        
                          crossbeam-deque
                        
                        (Rust)
                      Aug 25, 2021 
                    
                  
                    
                      Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4...
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-41025
                      
                      was published
                      Dec 9, 2021 
                    
                  
                    
                      Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-39713
                      
                      was published
                      Mar 17, 2022 
                    
                  
                    
                      The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently...
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2017-10915
                      
                      was published
                      May 17, 2022 
                    
                  
                    
                      Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2015-8556
                      
                      was published
                      May 17, 2022 
                    
                  
                    
                      Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or...
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2016-0930
                      
                      was published
                      May 17, 2022 
                    
                  
                    
                      file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict...
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2019-12450
                      
                      was published
                      May 24, 2022 
                    
                  
                    
                      On PTX1000 System, PTX10002-60C System, after upgrading to an affected release, a Race Condition...
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2021-31382
                      
                      was published
                      May 24, 2022 
                    
                  
                    
                      The iaware module has a vulnerability in thread security. Successful exploitation of this...
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2022-44551
                      
                      was published
                      Nov 10, 2022 
                    
                  
                    
                      This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13...
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2023-28201
                      
                      was published
                      May 8, 2023 
                    
                  
                    
                      snapd Race Condition vulnerability
                    
                      
  Critical
                    
                
                      
                        CVE-2022-3328
                      
                      was published
                        for
                        
                          github.com/snapcore/snapd
                        
                        (Go)
                      Jan 8, 2024 
                    
                  
                    
                      Pterodactyl Wings vulnerable to improper isolation of server file access
                    
                      
  Critical
                    
                
                      
                        CVE-2024-27102
                      
                      was published
                        for
                        
                          github.com/pterodactyl/wings
                        
                        (Go)
                      Mar 15, 2024 
                    
                  
                    
                      TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability. This vulnerability allows...
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2023-27359
                      
                      was published
                      May 3, 2024 
                    
                  
                    
                      Grafana Race condition allowing privilege escalation
                    
                      
  Critical
                    
                
                      
                        CVE-2022-39328
                      
                      was published
                        for
                        
                          github.com/grafana/grafana
                        
                        (Go)
                      May 14, 2024 
                    
                  
                    
                      Potential race conditions in IndexedDB could have caused memory corruption, leading to a...
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-10468
                      
                      was published
                      Oct 29, 2024 
                    
                  
                    
                      A remote code execution (RCE) vulnerability in the component /inventory/doCptimpoptInventory of...
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-48069
                      
                      was published
                      Nov 19, 2024 
                    
                  
                    
                      The server lacks thread safety and can be crashed by anomalous data sent by an anonymous user...
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-11144
                      
                      was published
                      Dec 16, 2024 
                    
                  
                    
                      A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.7.5...
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-30444
                      
                      was published
                      Apr 1, 2025 
                    
                  
                    
                      A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia...
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-43244
                      
                      was published
                      Jul 30, 2025 
                    
                  
                    
                      A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia...
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-43275
                      
                      was published
                      Jul 30, 2025 
                    
                  
        
        ProTip!
        Advisories are also available from the 
        GraphQL API