Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,272
Erlang
31
GitHub Actions
21
Go
2,047
Maven
5,000+
npm
3,739
NuGet
668
pip
3,415
Pub
12
RubyGems
891
Rust
868
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

270 advisories

Loading
In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure... High Unreviewed
CVE-2018-9553 was published May 13, 2022
Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi... High Unreviewed
CVE-2014-4343 was published May 13, 2022
PackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows remote attackers to cause a denial of... High Unreviewed
CVE-2018-11243 was published May 13, 2022
Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function... High Unreviewed
CVE-2018-1000222 was published May 13, 2022
Double free vulnerability in the Theora decoder in Google Chrome before 15.0.874.120 allows... High Unreviewed
CVE-2011-3892 was published May 13, 2022
Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote... High Unreviewed
CVE-2011-2821 was published May 13, 2022
Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8... High Unreviewed
CVE-2010-4494 was published May 13, 2022
Double free vulnerability in the snd_seq_oss_open function in sound/core/seq/oss/seq_oss_init.c... High Unreviewed
CVE-2010-3080 was published May 13, 2022
WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a... High Unreviewed
CVE-2018-8804 was published May 13, 2022
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially... High Unreviewed
CVE-2018-15518 was published May 13, 2022
Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have... High Unreviewed
CVE-2017-5506 was published May 13, 2022
An issue was discovered in CImg v.220. A double free in load_bmp in CImg.h occurs when loading a... High Unreviewed
CVE-2018-7589 was published May 13, 2022
Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16... High Unreviewed
CVE-2015-0312 was published May 13, 2022
fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary... High Unreviewed
CVE-2016-5384 was published May 13, 2022
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument... High Unreviewed
CVE-2018-3845 was published May 13, 2022
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument... High Unreviewed
CVE-2018-3855 was published May 13, 2022
An exploitable double-free vulnerability exists in the Office Open XML parser of Atlantis Word... High Unreviewed
CVE-2018-4000 was published May 13, 2022
A double-Free vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2.... High Unreviewed
CVE-2017-14449 was published May 13, 2022
Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the... High Unreviewed
CVE-2007-1216 was published May 3, 2022
Double free vulnerability in the Workstation service in Microsoft Windows allows remote... High Unreviewed
CVE-2009-1544 was published May 2, 2022
In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper... High Unreviewed
CVE-2019-1999 was published Apr 30, 2022
Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and... High Unreviewed
CVE-2004-0772 was published Apr 29, 2022
Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key... High Unreviewed
CVE-2004-0642 was published Apr 29, 2022
Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows... High Unreviewed
CVE-2003-1048 was published Apr 29, 2022
Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service ... High Unreviewed
CVE-2003-0545 was published Apr 29, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database