Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
101
GitHub Actions
54
Go
4,316
Maven
5,000+
npm
5,000+
NuGet
1,030
pip
5,000+
Pub
13
RubyGems
1,116
Rust
1,493
Swift
61
Unreviewed advisories
All unreviewed
5,000+

781 advisories

Loading
Vulnerability in LimeSurvey 6.13.0 in the endpoint /optout that causes infinite HTTP redirects... Moderate Unreviewed
CVE-2025-41074 was published Nov 20, 2025
Vulnerability in LimeSurvey 6.13.0 in the endpoint /optin that causes infinite HTTP redirects... Moderate Unreviewed
CVE-2025-41075 was published Nov 20, 2025
eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow... Moderate Unreviewed
CVE-2025-63829 was published Nov 18, 2025
MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of... Moderate Unreviewed
CVE-2025-11626 was published Oct 11, 2025
In the Linux kernel, the following vulnerability has been resolved: ubi: ubi_wl_put_peb: Fix... Moderate Unreviewed
CVE-2023-53481 was published Oct 1, 2025
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE... High Unreviewed
CVE-2025-20312 was published Sep 24, 2025
In the Linux kernel, the following vulnerability has been resolved: NFS: Avoid writeback threads... Moderate Unreviewed
CVE-2022-49097 was published Sep 23, 2025
In some circumstances, when DNSdist is configured to use the nghttp2 library to process incoming... Low Unreviewed
CVE-2025-30187 was published Sep 18, 2025
In the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite... Moderate Unreviewed
CVE-2025-38727 was published Sep 5, 2025
In the Linux kernel, the following vulnerability has been resolved: exfat: add cluster chain... Moderate Unreviewed
CVE-2025-38692 was published Sep 5, 2025
jsPDF Denial of Service (DoS) High
CVE-2025-57810 was published for jspdf (npm) Aug 26, 2025
AlexRomberg Credited to AlexRomberg
In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: qcs615:... Moderate Unreviewed
CVE-2025-38649 was published Aug 22, 2025
In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent infinite loop... Moderate Unreviewed
CVE-2025-38588 was published Aug 19, 2025
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite... Moderate Unreviewed
CVE-2025-38587 was published Aug 19, 2025
A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA... High Unreviewed
CVE-2025-20253 was published Aug 14, 2025
An issue was discovered in the demo/LINUXTCP implementation of cwalter-at freemodbus v.2018-09-12... High Unreviewed
CVE-2025-51986 was published Aug 14, 2025
A vulnerability in the management and VPN web servers of Cisco Secure Firewall ASA Software and... High Unreviewed
CVE-2025-20243 was published Aug 14, 2025
A vulnerability in the packet inspection functionality of the Snort 3 Detection Engine of Cisco... High Unreviewed
CVE-2025-20217 was published Aug 14, 2025
A vulnerability in the function that performs IPv4 and IPv6 Network Address Translation (NAT) DNS... High Unreviewed
CVE-2025-20136 was published Aug 14, 2025
quiche connection ID retirement can trigger an infinite loop High
CVE-2025-7054 was published for quiche (Rust) Aug 7, 2025
catenacyber Credited to catenacyber
A flaw exists within the Linux kernel's handling of new TCP connections. The issue results from... Moderate Unreviewed
CVE-2023-2593 was published Jul 30, 2025
There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry... High Unreviewed
CVE-2025-8194 was published Jul 28, 2025
Duplicate Advisory: Low severity (DoS) vulnerability in sequoia-openpgp Low
GHSA-g97w-mw7g-v3jv was published for sequoia-openpgp (Rust) Jul 27, 2025 • withdrawn
ImageMagick has XMP profile write that triggers hang due to unbounded loop High
CVE-2025-53015 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 23, 2025
yosiimich Credited to yosiimich, root-Brainoverflow, jin-156, JungWooJJING, I-mho, T1deSEC, P2GONE, and GAP-dev root-Brainoverflow root-Brainoverflow
jin-156 jin-156 JungWooJJING JungWooJJING I-mho I-mho T1deSEC T1deSEC P2GONE P2GONE GAP-dev GAP-dev
SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high... Low Unreviewed
CVE-2025-42954 was published Jul 8, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database