Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,466
Erlang
33
GitHub Actions
23
Go
2,166
Maven
5,000+
npm
3,830
NuGet
696
pip
3,507
Pub
12
RubyGems
909
Rust
904
Swift
38
Unreviewed advisories
All unreviewed
5,000+

581 advisories

Loading
In Azle, calling `setTimer` causes infinite loop of timers High
CVE-2025-29776 was published for azle (npm) Mar 14, 2025
In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid infinite loop to... Moderate Unreviewed
CVE-2022-49317 was published Mar 14, 2025
In the Linux kernel, the following vulnerability has been resolved: nvmet: Fix crash when a... Moderate Unreviewed
CVE-2025-21850 was published Mar 12, 2025
OpenDJ Denial of Service (DoS) using alias loop High
CVE-2025-27497 was published for org.openidentityplatform.opendj:opendj-server-legacy (Maven) Mar 5, 2025
hannes96
In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests... Moderate Unreviewed
CVE-2025-1695 was published Mar 4, 2025
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Arm Ltd Bifrost GPU... Moderate Unreviewed
CVE-2024-6790 was published Feb 3, 2025
In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on... Moderate Unreviewed
CVE-2025-21681 was published Jan 31, 2025
In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64... Moderate Unreviewed
CVE-2025-21665 was published Jan 31, 2025
In the Linux kernel, the following vulnerability has been resolved: iomap: avoid avoid... Moderate Unreviewed
CVE-2025-21667 was published Jan 31, 2025
In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input... High Unreviewed
CVE-2024-40675 was published Jan 28, 2025
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to... Moderate Unreviewed
CVE-2025-0290 was published Jan 28, 2025
Infinite loop and Blind SSRF found inside the Webfinger mechanism in @fedify/fedify Moderate
CVE-2025-23221 was published for @fedify/fedify (npm) Jan 21, 2025
nnfrog
In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop... Moderate Unreviewed
CVE-2024-57940 was published Jan 21, 2025
Predictable results in nanoid generation when given non-integer values Moderate
CVE-2024-55565 was published for nanoid (npm) Dec 9, 2024
krassowski katzj
CrzyHAX91
Drupal core Denial of Service High
CVE-2024-11941 was published for drupal/core (Composer) Dec 5, 2024
7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote... Moderate Unreviewed
CVE-2024-11612 was published Nov 22, 2024
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix 6... Moderate Unreviewed
CVE-2024-53055 was published Nov 19, 2024
In the Linux kernel, the following vulnerability has been resolved: filemap: Fix bounds checking... Moderate Unreviewed
CVE-2024-50272 was published Nov 19, 2024
In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible... High Unreviewed
CVE-2017-13313 was published Nov 16, 2024
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to... High Unreviewed
CVE-2024-50319 was published Nov 12, 2024
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to... High Unreviewed
CVE-2024-50321 was published Nov 12, 2024
An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to... High Unreviewed
CVE-2024-50320 was published Nov 12, 2024
A vulnerability has been found in SourceCodester Student Record Management System 1.0 and... Moderate Unreviewed
CVE-2024-11097 was published Nov 12, 2024
GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of... High Unreviewed
CVE-2024-52532 was published Nov 11, 2024
A denial of service vulnerability exists in the Web Application functionality of LevelOne WBR... Low Unreviewed
CVE-2024-33623 was published Oct 30, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database