Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,185
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

536 advisories

Loading
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix recursive... Moderate Unreviewed
CVE-2026-23292 was published Mar 25, 2026
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recvmsg()... Moderate Unreviewed
CVE-2026-23066 was published Feb 4, 2026
In the Linux kernel, the following vulnerability has been resolved: scsi: target: configfs:... High Unreviewed
CVE-2026-46149 was published May 28, 2026
In the Linux kernel, the following vulnerability has been resolved: block: avoid possible... Moderate Unreviewed
CVE-2025-39795 was published Sep 12, 2025
In the Linux kernel, the following vulnerability has been resolved: l2tp: Drop large packets... Moderate Unreviewed
CVE-2026-43080 was published May 6, 2026
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive... High Unreviewed
CVE-2024-8176 was published Mar 14, 2025
In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi... Moderate Unreviewed
CVE-2025-38614 was published Aug 19, 2025
A flaw was found in p11-kit. The RPC message attribute parsing functions... Moderate Unreviewed
CVE-2026-13757 was published Jun 29, 2026
libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as... Moderate Unreviewed
CVE-2022-27943 was published Mar 27, 2022
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via... Moderate Unreviewed
CVE-2022-25313 was published Feb 19, 2022
OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter... Moderate Unreviewed
CVE-2026-110259 was published Oct 14, 2026
OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader... Moderate Unreviewed
CVE-2026-110263 was published Oct 14, 2026
GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust... Moderate Unreviewed
CVE-2021-46195 was published Jan 15, 2022
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean... High Unreviewed
CVE-2020-12243 was published May 24, 2022
A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial... Moderate Unreviewed
CVE-2021-3997 was published Aug 24, 2022
MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via... High Unreviewed
CVE-2020-28196 was published May 24, 2022
alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types... Moderate Unreviewed
CVE-2019-19645 was published May 24, 2022
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack... High Unreviewed
CVE-2020-8285 was published May 24, 2022
A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used... Moderate Unreviewed
CVE-2026-88763 was published Sep 10, 2026
Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability High
CVE-2026-58280 was published for Microsoft.NETCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote... High Unreviewed
CVE-2026-92876 was published Oct 13, 2026
IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of... High Unreviewed
CVE-2026-90912 was published Oct 13, 2026
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in the MVG... Moderate Unreviewed
CVE-2026-109264 was published Oct 12, 2026
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder... Moderate Unreviewed
CVE-2026-109267 was published Oct 12, 2026
Django GeoDjango vulnerable to denial of service through deeply nested geometry collections Moderate
CVE-2026-15830 was published for django (pip) Aug 4, 2026
jacobtylerwalls Credited to jacobtylerwalls
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database