GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
                  
                    
                      
                      All reviewed
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      Composer
                    
                    
                      4,968
                    
                  
                  
                    
                      
                      Erlang
                    
                    
                      39
                    
                  
                  
                    
                      
                      GitHub Actions
                    
                    
                      38
                    
                  
                  
                    
                      
                      Go
                    
                    
                      2,616
                    
                  
                  
                    
                      
                      Maven
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      npm
                    
                    
                      4,255
                    
                  
                  
                    
                      
                      NuGet
                    
                    
                      760
                    
                  
                  
                    
                      
                      pip
                    
                    
                      4,040
                    
                  
                  
                    
                      
                      Pub
                    
                    
                      12
                    
                  
                  
                    
                      
                      RubyGems
                    
                    
                      953
                    
                  
                  
                    
                      
                      Rust
                    
                    
                      1,050
                    
                  
                  
                    
                      
                      Swift
                    
                    
                      45
                    
                  
                  Unreviewed advisories
                  
                    
                      
                      All unreviewed
                    
                    
                      5,000+
                    
                  
            17 advisories
        Filter by severity
        
      
      
    
                    
                      Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File
                    
                      
  Low
                    
                
                      
                        CVE-2020-1733
                      
                      was published
                        for
                        
                          ansible
                        
                        (pip)
                      Apr 20, 2021 
                    
                  
                    
                      Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
                    
                      
  Low
                    
                
                      
                        CVE-2020-10744
                      
                      was published
                        for
                        
                          ansible
                        
                        (pip)
                      Feb 9, 2022 
                    
                  
                    
                      gobase subject to Incorrect routing of some HTTP requests when using httpauth due to a race condition
                    
                      
  Low
                    
                
                      
                        GHSA-h2x7-2ff6-v32p
                      
                      was published
                        for
                        
                          github.com/ntbosscher/gobase
                        
                        (Go)
                      Feb 11, 2022 
                    
                  
                    
                      OpenStack Neutron Race condition vulnerability
                    
                      
  Low
                    
                
                      
                        CVE-2015-5240
                      
                      was published
                        for
                        
                          neutron
                        
                        (pip)
                      May 17, 2022 
                    
                  
                    
                      Apache Tomcat Race Condition vulnerability
                    
                      
  Low
                    
                
                      
                        CVE-2021-43980
                      
                      was published
                        for
                        
                          org.apache.tomcat:tomcat
                        
                        (Maven)
                      Sep 29, 2022 
                    
                  
                    
                      GoBase Race Condition vulnerability
                    
                      
  Low
                    
                
                      
                        CVE-2022-2583
                      
                      was published
                        for
                        
                          github.com/ntbosscher/gobase
                        
                        (Go)
                      Dec 28, 2022 
                    
                  
                    
                      Timing attack in eZ Platform Ibexa
                    
                      
  Low
                    
                
                      
                        CVE-2022-48366
                      
                      was published
                        for
                        
                          ezsystems/ezplatform-kernel
                        
                        (Composer)
                      Mar 12, 2023 
                    
                  
                    
                      Duplicate Advisory: Race Condition leading to logging errors
                    
                      
  Low
                    
                
                      
                        GHSA-v444-jggx-6v7f
                      
                      was published
                        for
                        
                          audited
                        
                        (RubyGems)
                      Jan 4, 2024 
                        •
                        
                          withdrawn
                    
                  
                    
                      Apache Answer Race Condition vulnerability
                    
                      
  Low
                    
                
                      
                        CVE-2023-49619
                      
                      was published
                        for
                        
                          github.com/apache/incubator-answer
                        
                        (Go)
                      Jan 10, 2024 
                    
                  
                    
                      Mattermost race condition
                    
                      
  Low
                    
                
                      
                        CVE-2024-1949
                      
                      was published
                        for
                        
                          github.com/mattermost/mattermost/server/v8
                        
                        (Go)
                      Feb 29, 2024 
                    
                  
                    
                      Kubernetes kube-apiserver Vulnerable to Race Condition
                    
                      
  Low
                    
                
                      
                        CVE-2024-7598
                      
                      was published
                        for
                        
                          k8s.io/kubernetes/cmd/kube-apiserver
                        
                        (Go)
                      Mar 20, 2025 
                    
                  
                    
                      Next.js Race Condition to Cache Poisoning
                    
                      
  Low
                    
                
                      
                        CVE-2025-32421
                      
                      was published
                        for
                        
                          next
                        
                        (npm)
                      May 15, 2025 
                    
                  
                    
                      process_lock has a Potential Unsound issue in unlock
                    
                      
  Low
                    
                
                      
                        CVE-2025-48751
                      
                      was published
                        for
                        
                          process_lock
                        
                        (Rust)
                      May 24, 2025 
                    
                  
                    
                      Taylor has race condition in /get-patch that allows purchase token replay
                    
                      
  Low
                    
                
                      
                        GHSA-vh5j-5fhq-9xwg
                      
                      was published
                        for
                        
                          taylored
                        
                        (npm)
                      Jun 27, 2025 
                    
                  
        
        ProTip!
        Advisories are also available from the 
        GraphQL API