Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

1,167 advisories

Loading
The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL... High Unreviewed
CVE-2022-37415 was published Aug 6, 2022
Allocation of Resources Without Limits or Throttling in Apache Tika High
CVE-2019-10088 was published for org.apache.tika:tika-core (Maven) Aug 6, 2019
Allocation of Resources Without Limits or Throttling in Apache Tika High
CVE-2019-10094 was published for org.apache.tika:tika-core (Maven) Aug 6, 2019
A vulnerability in the processing of IP Service Level Agreement (SLA) packets by Cisco IOS... High Unreviewed
CVE-2019-1737 was published May 13, 2022
Denial of Service in Netty High
CVE-2020-11612 was published for io.netty:netty-handler (Maven) Jun 15, 2020
Denial of Service in Cryptacular High
CVE-2020-7226 was published for org.cryptacular:cryptacular (Maven) Jun 10, 2020
In JetBrains Hub before 2022.3.15181 Throttling was missed when sending emails to a particular... High Unreviewed
CVE-2022-45471 was published Nov 18, 2022
Keep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js... High Unreviewed
CVE-2019-5739 was published May 13, 2022
A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated,... High Unreviewed
CVE-2019-1599 was published May 13, 2022
A vulnerability in the UDP protocol implementation for Cisco IoT Field Network Director (IoT-FND)... High Unreviewed
CVE-2019-1644 was published May 13, 2022
Specific IPv6 DHCP packets received by the jdhcpd daemon will cause a memory resource consumption... High Unreviewed
CVE-2019-0031 was published May 13, 2022
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email... High Unreviewed
CVE-2018-15460 was published May 13, 2022
In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which... High Unreviewed
CVE-2017-13133 was published May 13, 2022
A vulnerability in the egress packet processing functionality of the Cisco StarOS operating... High Unreviewed
CVE-2018-0239 was published May 13, 2022
Allocation of Resources Without Limits or Throttling in Keycloak High
CVE-2020-10758 was published for org.keycloak:keycloak-parent (Maven) Feb 9, 2022
A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server ... High Unreviewed
CVE-2018-0358 was published May 13, 2022
Allocation of Resources Without Limits or Throttling in Undertow High
CVE-2020-10705 was published for io.undertow:undertow-core (Maven) Apr 30, 2021
IBM API Connect 2018.1 through 2018.3.7 could allow an unauthenticated attacker to cause a denial... High Unreviewed
CVE-2018-1779 was published May 13, 2022
ReDOS in Vfsjfilechooser2 High
CVE-2021-29061 was published for com.github.fracpete:vfsjfilechooser2 (Maven) Jan 6, 2022
ReDOS in IS-SVG High
CVE-2021-29059 was published for is-svg (npm) Dec 10, 2021
Allocation of resources without limits or throttling in keycloak-model-infinispan High
CVE-2021-3637 was published for org.keycloak:keycloak-model-infinispan (Maven) Jul 13, 2021
OpenSource Moddable v10.5.0 was discovered to contain a stack overflow in the... High Unreviewed
CVE-2021-29329 was published Nov 20, 2021
An SRX Series Service Gateway configured for Unified Threat Management (UTM) may experience a... High Unreviewed
CVE-2019-0010 was published May 13, 2022
Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which... High Unreviewed
CVE-2019-6486 was published May 13, 2022
A regular expression denial of service (ReDoS) vulnerability exits in cbioportal 3.6.21 and older... High Unreviewed
CVE-2021-38244 was published Dec 17, 2021
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database