Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,598
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,507 advisories

Loading
Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per... Unknown Unreviewed
CVE-2026-110752 was published Oct 17, 2026
A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability... Moderate Unreviewed
CVE-2026-85231 was published Oct 16, 2026
An unauthenticated remote attacker may use an allocation of resources without limits or... High Unreviewed
CVE-2026-107564 was published Oct 16, 2026
Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail... Moderate Unreviewed
CVE-2026-16251 was published Oct 16, 2026
Mattermost versions 11.10.x <= 11.10.0, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10... Moderate Unreviewed
CVE-2026-19867 was published Oct 16, 2026
Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows... High Unreviewed
CVE-2026-111383 was published Oct 16, 2026
Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file... High Unreviewed
CVE-2026-111384 was published Oct 16, 2026
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized... High Unreviewed
CVE-2026-109468 was published Oct 15, 2026
A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand... Moderate Unreviewed
CVE-2026-110927 was published Oct 15, 2026
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... High Unreviewed
CVE-2026-102464 was published Oct 15, 2026
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... High Unreviewed
CVE-2026-102465 was published Oct 15, 2026
In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy... High Unreviewed
CVE-2026-102475 was published Oct 15, 2026
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... High Unreviewed
CVE-2026-102467 was published Oct 15, 2026
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption... High Unreviewed
CVE-2026-110843 was published Oct 15, 2026
An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of... High Unreviewed
CVE-2026-102048 was published Oct 14, 2026
An Allocation of Resources Without Limits or Throttling vulnerability in rpd, the routing... High Unreviewed
CVE-2026-101971 was published Oct 14, 2026
A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during... Moderate Unreviewed
CVE-2026-86561 was published Oct 14, 2026
BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in... Moderate Unreviewed
CVE-2026-110595 was published Oct 14, 2026
OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer... Moderate Unreviewed
CVE-2026-110591 was published Oct 14, 2026
OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons... Moderate Unreviewed
CVE-2026-110262 was published Oct 14, 2026
Allocation of resources without limits or throttling in SQL Server allows an authorized attacker... Moderate Unreviewed
CVE-2026-88084 was published Oct 13, 2026
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker... Moderate Unreviewed
CVE-2026-96300 was published Oct 13, 2026
Allocation of resources without limits or throttling in Active Directory Federation Services (AD... High Unreviewed
CVE-2026-85321 was published Oct 13, 2026
Allocation of resources without limits or throttling in Active Directory Federation Services (AD... High Unreviewed
CVE-2026-85319 was published Oct 13, 2026
Allocation of resources without limits or throttling in Active Directory Federation Services (AD... High Unreviewed
CVE-2026-83645 was published Oct 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database