Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,511
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,512
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

2,042 advisories

Loading
Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized... High Unreviewed
CVE-2026-54113 was published Aug 11, 2026
A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP... High Unreviewed
CVE-2026-18649 was published Aug 6, 2026
A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense... High Unreviewed
CVE-2019-1703 was published May 24, 2022
A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated,... High Unreviewed
CVE-2026-18618 was published Aug 10, 2026
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication... High Unreviewed
CVE-2025-41770 was published Aug 12, 2026
If one side of the TLS connection sends multiple key update messages post-handshake in a single... High Unreviewed
CVE-2026-32283 was published Apr 8, 2026
During chain building, the amount of work that is done is not correctly limited when a large... High Unreviewed
CVE-2026-32280 was published Apr 8, 2026
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger... High Unreviewed
CVE-2026-39820 was published May 7, 2026
A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0... Moderate Unreviewed
CVE-2026-71408 was published Aug 12, 2026
Spring Data Commons: Heap exhaustion from unbounded property-lookup cache retaining crafted string keys High
CVE-2026-41716 was published for org.springframework.data:spring-data-commons (Maven) Jun 10, 2026
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 19.0.6, 19... Moderate Unreviewed
CVE-2026-7427 was published Aug 12, 2026
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to... High Unreviewed
CVE-2026-17271 was published Aug 12, 2026
A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and... High Unreviewed
CVE-2026-15561 was published Aug 11, 2026
blaze: Unbounded WebSocket message aggregation in http4s-blaze-server High
CVE-2026-73493 was published for org.http4s:http4s-blaze-server_2.12 (Maven) Jul 24, 2026
etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline High
CVE-2026-73500 was published for go.etcd.io/etcd/v3 (Go) Jul 24, 2026
IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local... Low Unreviewed
CVE-2026-18096 was published Aug 12, 2026
A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending... High Unreviewed
CVE-2026-71469 was published Aug 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database