Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,968
Erlang
29
GitHub Actions
16
Go
1,752
Maven
4,982
npm
3,516
NuGet
609
pip
3,090
Pub
10
RubyGems
832
Rust
782
Swift
34
Unreviewed advisories
All unreviewed
5,000+

3,090 advisories

Loading
Pyro mishandles pid files in temporary directory locations and opening the pid file as root High
CVE-2011-2765 was published for pyro (pip) Aug 21, 2018
SQL Injection in pycsw Critical
CVE-2016-8640 was published for pycsw (pip) Aug 15, 2018
PyCA Cryptography vulnerable to GCM tag forgery High
CVE-2018-10903 was published for cryptography (pip) Jul 31, 2018
Mitmweb in mitmproxy allows DNS Rebinding attacks High
CVE-2018-14505 was published for mitmproxy (pip) Jul 31, 2018
Code injection in rope Critical
CVE-2014-3539 was published for rope (pip) Jul 26, 2018
Pillow Integer overflow in ImagingResampleHorizontal Critical
CVE-2016-4009 was published for Pillow (pip) Jul 24, 2018
Pillow Buffer overflow in ImagingFliDecode Moderate
CVE-2016-0775 was published for Pillow (pip) Jul 24, 2018
Pillow buffer overflow in ImagingPcdDecode Moderate
CVE-2016-2533 was published for Pillow (pip) Jul 24, 2018
Pillow Integer overflow in Map.c Moderate
CVE-2016-9189 was published for Pillow (pip) Jul 24, 2018
Pillow Buffer overflow in ImagingLibTiffDecode Moderate
CVE-2016-0740 was published for Pillow (pip) Jul 24, 2018
Moderate severity vulnerability that affects feedparser Moderate
CVE-2012-2921 was published for feedparser (pip) Jul 24, 2018
Low severity vulnerability that affects Plone Low
CVE-2011-1949 was published for Plone (pip) Jul 23, 2018
Cross-site scripting in django Moderate
CVE-2011-0697 was published for django (pip) Jul 23, 2018
sunSUNQ
Moderate severity vulnerability that affects Plone and plone.app.users Moderate
CVE-2011-1950 was published for Plone (pip) Jul 23, 2018
Cross-site scripting in django Moderate
CVE-2010-3082 was published for django (pip) Jul 23, 2018
tdunlap607
Session manipulation in Django Moderate
CVE-2011-4136 was published for django (pip) Jul 23, 2018
MarkLee131
Moderate severity vulnerability that affects Plone Moderate
CVE-2012-5503 was published for Plone (pip) Jul 23, 2018
Directory traversal in Django High
CVE-2011-0698 was published for django (pip) Jul 23, 2018
MarkLee131
Moderate severity vulnerability that affects feedparser Moderate
CVE-2011-1157 was published for feedparser (pip) Jul 23, 2018
Moderate severity vulnerability that affects Plone and Zope2 Moderate
CVE-2012-5489 was published for Plone (pip) Jul 23, 2018
High severity vulnerability that affects Plone and Zope2 High
CVE-2011-2528 was published for Plone (pip) Jul 23, 2018
Improper date handling in Django Moderate
CVE-2010-4535 was published for django (pip) Jul 23, 2018
MarkLee131
HTTP header injection in Plone and Zope2 Moderate
CVE-2012-5486 was published for Plone (pip) Jul 23, 2018
Moderate severity vulnerability that affects feedparser Moderate
CVE-2011-1158 was published for feedparser (pip) Jul 23, 2018
Improper query string handling in Django Moderate
CVE-2010-4534 was published for django (pip) Jul 23, 2018
MarkLee131
ProTip! Advisories are also available from the GraphQL API