Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,904
Erlang
38
GitHub Actions
38
Go
2,566
Maven
5,000+
npm
4,237
NuGet
753
pip
4,001
Pub
12
RubyGems
953
Rust
1,042
Swift
45
Unreviewed advisories
All unreviewed
5,000+

634 advisories

Loading
MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of... Moderate Unreviewed
CVE-2025-11626 was published Oct 11, 2025
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE... High Unreviewed
CVE-2025-20312 was published Sep 24, 2025
In the Linux kernel, the following vulnerability has been resolved: NFS: Avoid writeback threads... Moderate Unreviewed
CVE-2022-49097 was published Sep 23, 2025
In some circumstances, when DNSdist is configured to use the nghttp2 library to process incoming... Low Unreviewed
CVE-2025-30187 was published Sep 18, 2025
jsPDF Denial of Service (DoS) High
CVE-2025-57810 was published for jspdf (npm) Aug 26, 2025
AlexRomberg
Credited to AlexRomberg
An issue was discovered in the demo/LINUXTCP implementation of cwalter-at freemodbus v.2018-09-12... High Unreviewed
CVE-2025-51986 was published Aug 14, 2025
A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA... High Unreviewed
CVE-2025-20253 was published Aug 14, 2025
A vulnerability in the packet inspection functionality of the Snort 3 Detection Engine of Cisco... High Unreviewed
CVE-2025-20217 was published Aug 14, 2025
A vulnerability in the management and VPN web servers of Cisco Secure Firewall ASA Software and... High Unreviewed
CVE-2025-20243 was published Aug 14, 2025
A vulnerability in the function that performs IPv4 and IPv6 Network Address Translation (NAT) DNS... High Unreviewed
CVE-2025-20136 was published Aug 14, 2025
quiche connection ID retirement can trigger an infinite loop High
CVE-2025-7054 was published for quiche (Rust) Aug 7, 2025
catenacyber
Credited to catenacyber
A flaw exists within the Linux kernel's handling of new TCP connections. The issue results from... Moderate Unreviewed
CVE-2023-2593 was published Jul 30, 2025
There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry... High Unreviewed
CVE-2025-8194 was published Jul 28, 2025
Duplicate Advisory: Low severity (DoS) vulnerability in sequoia-openpgp Low
GHSA-g97w-mw7g-v3jv was published for sequoia-openpgp (Rust) Jul 27, 2025 • withdrawn
ImageMagick has XMP profile write that triggers hang due to unbounded loop High
CVE-2025-53015 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 23, 2025
yosiimich root-Brainoverflow
jin-156 JungWooJJING I-mho T1deSEC P2GONE GAP-dev
Credited to yosiimich, root-Brainoverflow, jin-156, JungWooJJING, I-mho, T1deSEC, P2GONE, and GAP-dev
SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high... Low Unreviewed
CVE-2025-42954 was published Jul 8, 2025
A vulnerability was found in HobbesOSR Kitten up to c4f8b7c3158983d1020af432be1b417b28686736 and... Moderate Unreviewed
CVE-2025-6365 was published Jun 20, 2025
An issue has been discovered in GitLab CE/EE affecting all versions from 17.7 before 17.10.8, 17... High Unreviewed
CVE-2025-0673 was published Jun 12, 2025
OctoPrint Vulnerable to Denial of Service through malformed HTTP request in OctoPrint Moderate
CVE-2025-48879 was published for OctoPrint (pip) Jun 10, 2025
jacopotediosi
Credited to jacopotediosi
GeoServer Infinite Loop Vulnerability in Jiffle process High
CVE-2025-30145 was published for org.geoserver.extension:gs-wps-core (Maven) Jun 10, 2025
sikeoka
Credited to sikeoka
Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted... High Unreviewed
CVE-2025-5399 was published Jun 7, 2025
tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c. High Unreviewed
CVE-2024-22654 was published May 29, 2025
FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial... Moderate Unreviewed
CVE-2024-11595 was published May 7, 2025
Infinite loop condition in Amazon.IonDotnet High
CVE-2025-3857 was published for Amazon.IonDotnet (NuGet) Apr 21, 2025
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix RCU stall... Moderate Unreviewed
CVE-2024-58097 was published Apr 16, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database