Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,428
Maven
5,000+
npm
5,000+
NuGet
1,088
pip
5,000+
Pub
13
RubyGems
1,129
Rust
1,506
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

245 advisories

Loading
A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel() function enters an... High Unreviewed
CVE-2026-64611 was published Jul 23, 2026
FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer... High Unreviewed
CVE-2026-64834 was published Jul 22, 2026
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. High Unreviewed
CVE-2026-56852 was published Jul 21, 2026
SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 allows authenticated users... High Unreviewed
CVE-2025-71397 was published Jul 18, 2026
XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed... High Unreviewed
CVE-2026-13401 was published Jul 16, 2026
HTML::Bare versions through 0.04 for Perl will hang in an infinite loop when parsing malformed... High Unreviewed
CVE-2026-13397 was published Jul 16, 2026
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services ... High Unreviewed
CVE-2026-50647 was published Jul 14, 2026
Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an... High Unreviewed
CVE-2026-54119 was published Jul 14, 2026
An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote... High Unreviewed
CVE-2026-11352 was published Jul 3, 2026
In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: fix signed... High Unreviewed
CVE-2026-52933 was published Jun 24, 2026
libssh2 through 1.11.1, fixed in commit 1762685, contains a pre-authentication denial of service... High Unreviewed
CVE-2026-55199 was published Jun 17, 2026
image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers... High Unreviewed
CVE-2025-71329 was published Jun 10, 2026
image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers... High Unreviewed
CVE-2025-71330 was published Jun 10, 2026
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module... High Unreviewed
CVE-2026-44186 was published Jun 8, 2026
When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server,... High Unreviewed
CVE-2026-42920 was published May 13, 2026
When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed local... High Unreviewed
CVE-2026-42781 was published May 13, 2026
A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote... High Unreviewed
CVE-2026-4890 was published May 11, 2026
lwjson 1.8.1 contains an improper input validation vulnerability in the streaming JSON parser ... High Unreviewed
CVE-2026-29975 was published May 8, 2026
In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: Return -ENOMEM... High Unreviewed
CVE-2026-31552 was published Apr 24, 2026
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... High Unreviewed
CVE-2026-34282 was published Apr 21, 2026
In the Linux kernel, the following vulnerability has been resolved: bonding: prevent potential... High Unreviewed
CVE-2026-23451 was published Apr 3, 2026
A flaw was identified in the RAR5 archive decompression logic of the libarchive library,... High Unreviewed
CVE-2026-4111 was published Mar 13, 2026
It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does... High Unreviewed
CVE-2026-2219 was published Mar 7, 2026
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in ixray-team ixray-1.6... High Unreviewed
CVE-2026-24831 was published Jan 27, 2026
A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the SIP application... High Unreviewed
CVE-2026-21905 was published Jan 15, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database