GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,466
Erlang
33
GitHub Actions
23
Go
2,166
Maven
5,000+
npm
3,830
NuGet
696
pip
3,507
Pub
12
RubyGems
909
Rust
904
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
367 advisories
Filter by severity
lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component...
High
Unreviewed
CVE-2024-57722
was published
Jan 23, 2025
An issue in how XINJE XD5E-24R and XL5E-16T v3.5.3b handles TCP protocol messages allows...
High
Unreviewed
CVE-2024-50955
was published
Nov 14, 2024
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...
High
Unreviewed
CVE-2025-21545
was published
Jan 21, 2025
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...
High
Unreviewed
CVE-2025-21549
was published
Jan 21, 2025
An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a...
High
Unreviewed
CVE-2024-56940
was published
Feb 13, 2025
An issue was discovered in Atos Eviden BullSequana XH2140 BMC before C4EM-125: OMF_C4E 101.05...
High
Unreviewed
CVE-2024-46933
was published
Feb 20, 2025
A vulnerability in the Internet Key Exchange version 2 (IKEv2) function of Cisco IOS XR Software...
High
Unreviewed
CVE-2025-20209
was published
Mar 12, 2025
A vulnerability in the handling of specific packets that are punted from a line card to a route...
High
Unreviewed
CVE-2025-20141
was published
Mar 12, 2025
Denial of Service vulnerabilities where found providing a potiential for device service...
High
Unreviewed
CVE-2024-48843
was published
Dec 5, 2024
An issue in aedes v0.51.2 allows attackers to cause a Denial of Service(DoS) via a crafted request.
High
Unreviewed
CVE-2024-48080
was published
Dec 3, 2024
Some products have the double fetch vulnerability. Successful exploitation of this vulnerability...
High
Unreviewed
CVE-2022-48357
was published
Mar 28, 2023
Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections.
High
Unreviewed
CVE-2025-26819
was published
Feb 15, 2025
Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB....
High
Unreviewed
CVE-2023-34397
was published
Feb 14, 2025
CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could...
High
Unreviewed
CVE-2025-1059
was published
Feb 13, 2025
Multipart form parsing can consume large amounts of CPU and memory when processing form inputs...
High
Unreviewed
CVE-2023-24536
was published
Apr 6, 2023
An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of...
High
Unreviewed
CVE-2023-27191
was published
Apr 11, 2023
An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before...
High
Unreviewed
CVE-2018-15472
was published
Apr 16, 2023
An issue found in POWERAMP 925-bundle-play and Poweramp 954-uni allows a remote attacker to cause...
High
Unreviewed
CVE-2023-27643
was published
Apr 14, 2023
An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a denial of service...
High
Unreviewed
CVE-2023-27653
was published
Apr 14, 2023
Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it...
High
Unreviewed
CVE-2024-12705
was published
Jan 30, 2025
TiKV 6.1.2 allows remote attackers to cause a denial of service (fatal error, with RpcStatus...
High
Unreviewed
CVE-2023-30636
was published
Apr 14, 2023
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to...
High
Unreviewed
CVE-2024-2878
was published
Feb 5, 2025
An issue in Open5GS v.2.7.2 allows a remote attacker to cause a denial of service via the...
High
Unreviewed
CVE-2024-57519
was published
Jan 29, 2025
When BIG-IP AFM is provisioned with IPS module enabled and protocol inspection profile is...
High
Unreviewed
CVE-2025-24312
was published
Feb 5, 2025
Sengled Dimmer Switch V0.0.9 contains a denial of service (DOS) vulnerability, which allows a...
High
Unreviewed
CVE-2023-29779
was published
Apr 25, 2023
ProTip!
Advisories are also available from the
GraphQL API