GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,262
Erlang
31
GitHub Actions
21
Go
2,024
Maven
5,000+
npm
3,731
NuGet
662
pip
3,407
Pub
12
RubyGems
891
Rust
864
Swift
36
Unreviewed advisories
All unreviewed
5,000+
16 advisories
Filter by severity
Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer
Critical
CVE-2020-17446
was published
for
asyncpg
(pip)
Apr 20, 2021
Reference binding to null in `ParameterizedTruncatedNormal`
Low
CVE-2021-29568
was published
for
tensorflow
(pip)
May 21, 2021
Reference binding to nullptr in shape inference
High
CVE-2021-37676
was published
for
tensorflow
(pip)
Aug 25, 2021
Reference binding to nullptr in map operations
High
CVE-2021-37671
was published
for
tensorflow
(pip)
Aug 25, 2021
Reference binding to nullptr in unicode encoding
High
CVE-2021-37667
was published
for
tensorflow
(pip)
Aug 25, 2021
Reference binding to nullptr in `RaggedTensorToVariant`
High
CVE-2021-37666
was published
for
tensorflow
(pip)
Aug 25, 2021
Reference binding to nullptr in boosted trees
Moderate
CVE-2021-37662
was published
for
tensorflow
(pip)
Aug 25, 2021
Reference binding to nullptr in `MatrixSetDiagV*` ops
Moderate
CVE-2021-37658
was published
for
tensorflow
(pip)
Aug 25, 2021
Reference binding to nullptr in `MatrixDiagV*` ops
Moderate
CVE-2021-37657
was published
for
tensorflow
(pip)
Aug 25, 2021
Reference binding to nullptr in `RaggedTensorToSparse`
Moderate
CVE-2021-37656
was published
for
tensorflow
(pip)
Aug 25, 2021
Undefined behavior via `nullptr` reference binding in sparse matrix multiplication
High
CVE-2021-41219
was published
for
tensorflow
(pip)
Nov 10, 2021
Reference binding to `nullptr` in `tf.ragged.cross`
High
CVE-2021-41214
was published
for
tensorflow
(pip)
Nov 10, 2021
Segfault while copying constant resource tensor
Moderate
CVE-2021-41204
was published
for
tensorflow
(pip)
Nov 10, 2021
Unitialized access in `EinsumHelper::ParseEquation`
High
CVE-2021-41201
was published
for
tensorflow
(pip)
Nov 10, 2021
Incomplete validation in boosted trees code
Critical
CVE-2021-41208
was published
for
tensorflow
(pip)
Nov 10, 2021
NULL Pointer Dereference and Access of Uninitialized Pointer in TensorFlow
Critical
GHSA-h6gw-r52c-724r
was published
for
tensorflow
(pip)
Feb 9, 2022
ProTip!
Advisories are also available from the
GraphQL API