GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,732
Erlang
35
GitHub Actions
29
Go
2,310
Maven
5,000+
npm
3,949
NuGet
711
pip
3,728
Pub
12
RubyGems
920
Rust
964
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
896 advisories
Filter by severity
A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3...
Moderate
Unreviewed
CVE-2024-23814
was published
Feb 11, 2025
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS...
Moderate
Unreviewed
CVE-2024-54658
was published
Feb 10, 2025
An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology...
Moderate
Unreviewed
CVE-2024-57672
was published
Feb 6, 2025
An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology...
Moderate
Unreviewed
CVE-2024-57673
was published
Feb 6, 2025
A vulnerability, which was classified as problematic, was found in JoeyBling bootplus up to...
Moderate
Unreviewed
CVE-2025-0704
was published
Jan 24, 2025
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component...
Moderate
Unreviewed
CVE-2024-57724
was published
Jan 23, 2025
In build_read_multi_rsp of gatt_sr.cc, there is a possible denial of service due to a logic error...
Moderate
Unreviewed
CVE-2024-43763
was published
Jan 22, 2025
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). ...
Moderate
Unreviewed
CVE-2025-21548
was published
Jan 21, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema)...
Moderate
Unreviewed
CVE-2025-21529
was published
Jan 21, 2025
In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible way to crash the...
Moderate
Unreviewed
CVE-2018-9447
was published
Jan 18, 2025
Dell PowerScale OneFS versions 8.2.2.x through 9.9.0.0 contain an uncontrolled resource...
Moderate
Unreviewed
CVE-2024-47239
was published
Jan 8, 2025
An uncontrolled resource consumption vulnerability has been reported to affect several QNAP...
Moderate
Unreviewed
CVE-2022-27600
was published
Dec 19, 2024
An incomplete fix for ose-olm-catalogd-container was issued for the Rapid Reset Vulnerability ...
Moderate
Unreviewed
CVE-2024-12698
was published
Dec 18, 2024
The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all...
Moderate
Unreviewed
CVE-2024-12601
was published
Dec 17, 2024
The Minify HTML plugin for WordPress is vulnerable to Regular Expression Denial of Service (ReDoS...
Moderate
Unreviewed
CVE-2024-12579
was published
Dec 13, 2024
Dell PowerScale OneFS Versions 9.5.0.x through 9.8.0.x contain an uncontrolled resource...
Moderate
Unreviewed
CVE-2024-42426
was published
Dec 9, 2024
There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL...
Moderate
Unreviewed
CVE-2024-11498
was published
Nov 25, 2024
In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper...
Moderate
Unreviewed
CVE-2018-9412
was published
Nov 20, 2024
Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an...
Moderate
Unreviewed
CVE-2024-45420
was published
Nov 19, 2024
A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module. The issue...
Moderate
Unreviewed
CVE-2023-39180
was published
Nov 18, 2024
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected...
Moderate
Unreviewed
CVE-2024-46891
was published
Nov 12, 2024
Authenticated users can upload specifically crafted files to leak server resources. This behavior...
Moderate
Unreviewed
CVE-2024-38826
was published
Nov 11, 2024
A vulnerability, which was classified as problematic, has been found in Tongda OA 2017 up to 11.7...
Moderate
Unreviewed
CVE-2024-10599
was published
Nov 1, 2024
The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation...
Moderate
Unreviewed
CVE-2024-31152
was published
Oct 30, 2024
A vulnerability in the SSH server of Cisco Adaptive Security Appliance (ASA) Software could allow...
Moderate
Unreviewed
CVE-2024-20526
was published
Oct 23, 2024
ProTip!
Advisories are also available from the
GraphQL API