GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
                  
                    
                      
                      All reviewed
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      Composer
                    
                    
                      4,963
                    
                  
                  
                    
                      
                      Erlang
                    
                    
                      39
                    
                  
                  
                    
                      
                      GitHub Actions
                    
                    
                      38
                    
                  
                  
                    
                      
                      Go
                    
                    
                      2,614
                    
                  
                  
                    
                      
                      Maven
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      npm
                    
                    
                      4,254
                    
                  
                  
                    
                      
                      NuGet
                    
                    
                      760
                    
                  
                  
                    
                      
                      pip
                    
                    
                      4,031
                    
                  
                  
                    
                      
                      Pub
                    
                    
                      12
                    
                  
                  
                    
                      
                      RubyGems
                    
                    
                      953
                    
                  
                  
                    
                      
                      Rust
                    
                    
                      1,049
                    
                  
                  
                    
                      
                      Swift
                    
                    
                      45
                    
                  
                  Unreviewed advisories
                  
                    
                      
                      All unreviewed
                    
                    
                      5,000+
                    
                  
            25 advisories
        Filter by severity
        
      
      
    
                    
                      Use after free in libpulse-binding
                    
                      
  High
                    
                
                      
                        GHSA-ghpq-vjxw-ch5w
                      
                      was published
                        for
                        
                          libpulse-binding
                        
                        (Rust)
                      Aug 25, 2021 
                    
                  
                    
                      Use after free in generic-array
                    
                      
  High
                    
                
                      
                        CVE-2020-36465
                      
                      was published
                        for
                        
                          generic-array
                        
                        (Rust)
                      Aug 25, 2021 
                    
                  
                    
                      futures_task::waker may cause a use-after-free if used on a type that isn't 'static
                    
                      
  High
                    
                
                      
                        CVE-2020-35906
                      
                      was published
                        for
                        
                          futures-task
                        
                        (Rust)
                      May 24, 2022 
                    
                  
                    
                      Use After Free in libpulse-binding
                    
                      
  High
                    
                
                      
                        CVE-2018-25028
                      
                      was published
                        for
                        
                          libpulse-binding
                        
                        (Rust)
                      Jan 6, 2022 
                    
                  
                    
                      Use After Free in libpulse-binding
                    
                      
  High
                    
                
                      
                        CVE-2018-25027
                      
                      was published
                        for
                        
                          libpulse-binding
                        
                        (Rust)
                      Jan 6, 2022 
                    
                  
                    
                      Use After Free in tremor-script
                    
                      
  High
                    
                
                      
                        CVE-2021-45702
                      
                      was published
                        for
                        
                          tremor-script
                        
                        (Rust)
                      Jan 6, 2022 
                    
                  
                    
                      Use after free in string-interner
                    
                      
  High
                    
                
                      
                        CVE-2019-16882
                      
                      was published
                        for
                        
                          string-interner
                        
                        (Rust)
                      Aug 25, 2021 
                    
                  
                    
                      Mio's tokens for named pipes may be delivered after deregistration
                    
                      
  High
                    
                
                      
                        CVE-2024-27308
                      
                      was published
                        for
                        
                          mio
                        
                        (Rust)
                      Mar 4, 2024 
                    
                  
                    
                      openssl-src vulnerable to Use-after-free following `BIO_new_NDEF`
                    
                      
  High
                    
                
                      
                        CVE-2023-0215
                      
                      was published
                        for
                        
                          openssl-src
                        
                        (Rust)
                      Feb 8, 2023 
                    
                  
                    
                      cassandra-rs's non-idiomatic use of iterators leads to use after free
                    
                      
  High
                    
                
                      
                        CVE-2024-27284
                      
                      was published
                        for
                        
                          cassandra-cpp
                        
                        (Rust)
                      Apr 5, 2024 
                    
                  
                    
                      macroquad vulnerable to multiple soundness issues
                    
                      
  High
                    
                
                      
                        GHSA-gg76-hg3v-5q6c
                      
                      was published
                        for
                        
                          macroquad
                        
                        (Rust)
                      May 15, 2025 
                    
                  
                    
                      FuelVM is vulnerable to heap memory allocation re-use bug
                    
                      
  High
                    
                
                      
                        GHSA-2pgj-5cv2-6xxw
                      
                      was published
                        for
                        
                          fuel-vm
                        
                        (Rust)
                      Oct 8, 2025 
                    
                  
        
        ProTip!
        Advisories are also available from the 
        GraphQL API