Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,185
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

536 advisories

Loading
temporalio/sqlparser accepts SQL containing deeply nested unary expressions and can return a... High Unreviewed
CVE-2026-65651 was published Sep 21, 2026
braces vulnerable to stack-exhaustion denial of service through deeply nested patterns High
CVE-2026-93687 was published for braces (npm) Sep 18, 2026
go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON... High Unreviewed
CVE-2026-93450 was published Sep 18, 2026
redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser... High Unreviewed
CVE-2026-93435 was published Sep 18, 2026
QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when... High Unreviewed
CVE-2026-19248 was published Sep 16, 2026
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to... High Unreviewed
CVE-2026-12358 was published Sep 15, 2026
Duplicate Advisory: Vikunja: Unbounded nested task-filter recursion permits API process termination High
GHSA-jfw3-2gcf-23r5 was published for code.vikunja.io/api (Go) Sep 15, 2026 • withdrawn
msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker... Moderate Unreviewed
CVE-2026-90472 was published Sep 12, 2026
A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used... Moderate Unreviewed
CVE-2026-88763 was published Sep 10, 2026
An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go... Moderate Unreviewed
CVE-2026-19201 was published Sep 9, 2026
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny... High Unreviewed
CVE-2026-69378 was published Sep 8, 2026
XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that... High Unreviewed
CVE-2026-73321 was published Sep 8, 2026
Uncontrolled recursion in Qt's QDomDocument serialization (QtXml) lets deeply nested untrusted... High Unreviewed
CVE-2026-11573 was published Sep 8, 2026
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM... Moderate Unreviewed
CVE-2026-17440 was published Sep 4, 2026
toml-node: Uncontrolled Recursion High
CVE-2026-77465 was published for toml (npm) Sep 3, 2026
seok-hee97 Credited to seok-hee97
A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an... Moderate Unreviewed
CVE-2026-14255 was published Sep 2, 2026
Mistune: Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown High
CVE-2026-76098 was published for mistune (pip) Sep 2, 2026
wan1yan Credited to wan1yan
NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars Moderate
CVE-2026-12876 was published for nltk (pip) Sep 2, 2026
NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input Moderate
CVE-2026-81724 was published for nltk (pip) Sep 2, 2026
JoshgunAbdullayev Credited to JoshgunAbdullayev
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in... High Unreviewed
CVE-2026-81928 was published Sep 2, 2026
llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers... High Unreviewed
CVE-2026-52132 was published Sep 1, 2026
llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to... High Unreviewed
CVE-2026-52130 was published Sep 1, 2026
Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with... Moderate Unreviewed
CVE-2026-82797 was published Aug 31, 2026
ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption Low
CVE-2026-55588 was published for oras.land/oras (Go) Aug 28, 2026
aditya19200 Credited to aditya19200
An attacker that has valid credentials can send crafted compressed data that causes the affected... Moderate Unreviewed
CVE-2026-73209 was published Aug 28, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database