Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,293
Erlang
31
GitHub Actions
21
Go
2,061
Maven
5,000+
npm
3,744
NuGet
668
pip
3,423
Pub
12
RubyGems
892
Rust
875
Swift
36
Unreviewed advisories
All unreviewed
5,000+

88 advisories

Loading
FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec... Critical Unreviewed
CVE-2024-35368 was published Nov 29, 2024
A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an... Critical Unreviewed
CVE-2024-11704 was published Nov 26, 2024
In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double... Critical Unreviewed
CVE-2024-10934 was published Nov 15, 2024
A vulnerability was found in libyaml up to 0.2.5. Affected by this issue is the function... Critical Unreviewed
CVE-2024-35325 was published Jun 13, 2024
Fluent Bit (aka fluent-bit) 1.7.0 through 1.7,4 has a double free in flb_free (called from... Critical Unreviewed
CVE-2021-36088 was published May 24, 2022
curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a... Critical Unreviewed
CVE-2022-42915 was published Oct 30, 2022
An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC... Critical Unreviewed
CVE-2019-12874 was published May 24, 2022
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017... Critical Unreviewed
CVE-2019-7080 was published May 24, 2022
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017... Critical Unreviewed
CVE-2019-7784 was published May 24, 2022
Systrace before 1.6.0 has insufficient escape policy enforcement. Critical Unreviewed
CVE-2007-4773 was published Apr 21, 2022
A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The... Critical Unreviewed
CVE-2024-23809 was published Feb 20, 2024
A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig... Critical Unreviewed
CVE-2024-22097 was published Feb 20, 2024
When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances... Critical Unreviewed
CVE-2021-22945 was published May 24, 2022
OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms... Critical Unreviewed
CVE-2023-25136 was published Feb 3, 2023
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2.... Critical Unreviewed
CVE-2022-28738 was published May 10, 2022
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free,... Critical Unreviewed
CVE-2023-49937 was published Dec 14, 2023
A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and... Critical Unreviewed
CVE-2023-35784 was published Jun 16, 2023
Double free in crossbeam Critical
CVE-2018-20996 was published for crossbeam (Rust) Aug 25, 2021
Double-free in id-map Critical
CVE-2021-30455 was published for id-map (Rust) Aug 25, 2021
Double free in sys-info Critical
CVE-2020-36434 was published for sys-info (Rust) Aug 25, 2021
Double free in toodee Critical
CVE-2021-28028 was published for toodee (Rust) Sep 1, 2021
Double free in smallvec Critical
CVE-2018-20991 was published for smallvec (Rust) Aug 25, 2021
Double free in smallvec Critical
CVE-2019-15551 was published for smallvec (Rust) Aug 25, 2021
tdunlap607
Double free in stack_dst Critical
CVE-2021-28034 was published for stack_dst (Rust) Sep 1, 2021
move_elements can double-free objects on panic Critical
CVE-2021-28031 was published for scratchpad (Rust) May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database