Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,511
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,512
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

561 advisories

Loading
A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending... High Unreviewed
CVE-2026-71469 was published Aug 13, 2026
A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and... High Unreviewed
CVE-2026-15561 was published Aug 11, 2026
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to... High Unreviewed
CVE-2026-17271 was published Aug 12, 2026
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger... High Unreviewed
CVE-2026-39820 was published May 7, 2026
During chain building, the amount of work that is done is not correctly limited when a large... High Unreviewed
CVE-2026-32280 was published Apr 8, 2026
If one side of the TLS connection sends multiple key update messages post-handshake in a single... High Unreviewed
CVE-2026-32283 was published Apr 8, 2026
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication... High Unreviewed
CVE-2025-41770 was published Aug 12, 2026
A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated,... High Unreviewed
CVE-2026-18618 was published Aug 10, 2026
A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense... High Unreviewed
CVE-2019-1703 was published May 24, 2022
A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP... High Unreviewed
CVE-2026-18649 was published Aug 6, 2026
Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized... High Unreviewed
CVE-2026-54113 was published Aug 11, 2026
A denial-of-service vulnerability caused by unbounded resource allocation was discovered in the... High Unreviewed
CVE-2026-31984 was published Jul 9, 2026
A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that... High Unreviewed
CVE-2021-41840 was published Feb 10, 2022
TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in... High Unreviewed
CVE-2025-15682 was published Aug 10, 2026
A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt(... High Unreviewed
CVE-2026-48933 was published Jun 26, 2026
Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an... High Unreviewed
CVE-2026-15972 was published Aug 7, 2026
Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ... High Unreviewed
CVE-2026-67585 was published Aug 7, 2026
The net/url package does not set a limit on the number of query parameters in a query. While the... High Unreviewed
CVE-2025-61726 was published Jan 28, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable:... High Unreviewed
CVE-2026-43329 was published May 8, 2026
Apache CXF allows to control the maximum attachment size via the "attachment-max-size". Prior to... High Unreviewed
CVE-2026-54225 was published Aug 6, 2026
A pre-authentication attacker could leverage type size/count handling to cause excessive... High Unreviewed
CVE-2026-68060 was published Aug 5, 2026
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource... High Unreviewed
CVE-2026-68074 was published Aug 5, 2026
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource... High Unreviewed
CVE-2026-66257 was published Aug 5, 2026
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource... High Unreviewed
CVE-2026-67465 was published Aug 5, 2026
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource... High Unreviewed
CVE-2026-67588 was published Aug 5, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database