Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,717
Maven
5,000+
npm
4,328
NuGet
761
pip
4,105
Pub
12
RubyGems
958
Rust
1,065
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,423 advisories

Loading
Mozilla developers and community members reported memory safety bugs present in Firefox 68,... Critical Unreviewed
CVE-2019-11740 was published May 24, 2022
Mozilla developers and community members reported memory safety bugs present in Firefox 62 and... Critical Unreviewed
CVE-2018-12390 was published May 14, 2022
Mozilla developers and community members reported memory safety bugs present in Firefox 67 and... Critical Unreviewed
CVE-2019-11709 was published May 24, 2022
The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to... Critical Unreviewed
CVE-2019-9792 was published May 24, 2022
A buffer overflow can occur in the Skia library during buffer offset calculations with hardware... Critical Unreviewed
CVE-2018-18493 was published May 14, 2022
Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence... Critical Unreviewed
CVE-2018-12376 was published May 14, 2022
Mozilla developers backported selected changes in the Skia library. These changes correct memory... Critical Unreviewed
CVE-2018-5183 was published May 14, 2022
Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence... Critical Unreviewed
CVE-2018-5187 was published May 14, 2022
Mozilla developers and community members reported memory safety bugs present in Firefox 63 and... Critical Unreviewed
CVE-2018-12405 was published May 14, 2022
The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics... Critical Unreviewed
CVE-2019-11693 was published May 24, 2022
Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of... Critical Unreviewed
CVE-2018-5150 was published May 14, 2022
Mozilla developers and community members reported memory safety bugs present in Firefox 65,... Critical Unreviewed
CVE-2019-9788 was published May 24, 2022
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory... Critical Unreviewed
CVE-2018-5145 was published May 14, 2022
A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,... Critical Unreviewed
CVE-2017-7824 was published May 14, 2022
Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed... Critical Unreviewed
CVE-2018-5089 was published May 14, 2022
Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed... Critical Unreviewed
CVE-2017-7810 was published May 14, 2022
Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed... Critical Unreviewed
CVE-2017-7826 was published May 14, 2022
A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA)... Critical Unreviewed
CVE-2017-7785 was published May 14, 2022
Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of... Critical Unreviewed
CVE-2017-7779 was published May 14, 2022
A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads,... Critical Unreviewed
CVE-2017-7778 was published May 14, 2022
A buffer overflow will occur when viewing a certificate in the certificate manager if the... Critical Unreviewed
CVE-2017-7792 was published May 14, 2022
JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP... Critical Unreviewed
CVE-2017-5400 was published May 14, 2022
Memory corruption resulting in a potentially exploitable crash during garbage collection of... Critical Unreviewed
CVE-2017-5410 was published May 14, 2022
Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of... Critical Unreviewed
CVE-2017-5398 was published May 14, 2022
Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed... Critical Unreviewed
CVE-2017-5470 was published May 14, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database