Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,285
Erlang
31
GitHub Actions
21
Go
2,057
Maven
5,000+
npm
3,742
NuGet
668
pip
3,423
Pub
12
RubyGems
892
Rust
875
Swift
36
Unreviewed advisories
All unreviewed
5,000+

374 advisories

Loading
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected... Moderate Unreviewed
CVE-2022-43626 was published Mar 29, 2023
Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could... Moderate Unreviewed
CVE-2023-20023 was published Apr 5, 2023
Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could... Moderate Unreviewed
CVE-2023-20152 was published Apr 5, 2023
Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager ... Moderate Unreviewed
CVE-2023-20121 was published Apr 5, 2023
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected... Moderate Unreviewed
CVE-2022-43633 was published Mar 29, 2023
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected... Moderate Unreviewed
CVE-2022-43631 was published Mar 29, 2023
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected... Moderate Unreviewed
CVE-2022-43632 was published Mar 29, 2023
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected... Moderate Unreviewed
CVE-2022-43629 was published Mar 29, 2023
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected... Moderate Unreviewed
CVE-2022-43628 was published Mar 29, 2023
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected... Moderate Unreviewed
CVE-2022-43627 was published Mar 29, 2023
Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could... Moderate Unreviewed
CVE-2023-20022 was published Apr 5, 2023
Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could... Moderate Unreviewed
CVE-2023-20021 was published Apr 5, 2023
Multiple vulnerabilities in specific Cisco Identity Services Engine (ISE) CLI commands could... Moderate Unreviewed
CVE-2023-20153 was published Apr 5, 2023
Exposure of home directory through shescape on Unix with Bash Moderate
CVE-2022-24725 was published for shescape (npm) Mar 3, 2022
sharp vulnerable to Command Injection in post-installation over build environment Moderate
CVE-2022-29256 was published for sharp (npm) Jun 1, 2022
dwisiswant0
The Citrix Receiver wrapper function does not safely handle user supplied input, which may be... Moderate Unreviewed
CVE-2019-18910 was published May 24, 2022
OS Command Injection in Apache Airflow Moderate
CVE-2022-40954 was published for apache-airflow (pip) Nov 22, 2022
Snyk plugins vulnerable to Command Injection Moderate
CVE-2022-22984 was published for @snyk/snyk-cocoapods-plugin (npm) Nov 30, 2022
OS Command Injection in Rake Moderate
CVE-2020-8130 was published for rake (RubyGems) Feb 28, 2020
Kubernetes Arbitrary Command Injection Moderate
CVE-2018-1002101 was published for k8s.io/kubernetes (Go) Feb 15, 2022
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker... Moderate Unreviewed
CVE-2022-20930 was published Oct 1, 2022
A vulnerability classified as critical was found in KylinSoft youker-assistant. Affected by this... Moderate Unreviewed
CVE-2023-2091 was published Apr 15, 2023
Cocaine Gem OS Command Injection vulnerability Moderate
CVE-2013-4457 was published for cocaine (RubyGems) Oct 24, 2017
A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability... Moderate Unreviewed
CVE-2023-3607 was published Jul 10, 2023
A vulnerability was found in TamronOS up to 20230703. It has been classified as critical. This... Moderate Unreviewed
CVE-2023-3606 was published Jul 10, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database