Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

4,494 advisories

Loading
A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the... Low Unreviewed
CVE-2026-111985 was published Oct 18, 2026
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption... High Unreviewed
CVE-2026-111901 was published Oct 17, 2026
FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in... High Unreviewed
CVE-2026-111378 was published Oct 16, 2026
FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in... High Unreviewed
CVE-2026-111377 was published Oct 16, 2026
A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS... Moderate Unreviewed
CVE-2026-111252 was published Oct 15, 2026
containerd: Unpack DoS via repeated opaque whiteouts Moderate
CVE-2026-95838 was published for github.com/containerd/containerd (Go) Oct 15, 2026
jake-ciolek Credited to jake-ciolek
kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression Moderate
CVE-2026-100350 was published for github.com/getkin/kin-openapi (Go) Oct 15, 2026
matiasinsaurralde Credited to matiasinsaurralde
MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion Moderate
CVE-2026-59951 was published for mcp (pip) Oct 15, 2026
rharang Credited to rharang, evilgensec, Madan301, subchat, and nickelsec evilgensec evilgensec
Madan301 Madan301 subchat subchat nickelsec nickelsec
AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity Moderate
CVE-2026-104150 was published for @adonisjs/http-server (npm) Oct 15, 2026
nikkoenggaliano Credited to nikkoenggaliano
A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib... High Unreviewed
CVE-2026-88753 was published Oct 15, 2026
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... High Unreviewed
CVE-2026-102462 was published Oct 15, 2026
Duplicate Advisory: Nodemailer: Quadratic (O(n^2)) DKIM header unfolding lets a large folded header cause remote denial of service during signing High
GHSA-wxxx-r42m-9rp8 was published for nodemailer (npm) Oct 15, 2026 • withdrawn
Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service... High Unreviewed
CVE-2026-110872 was published Oct 15, 2026
FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in... High Unreviewed
CVE-2026-110832 was published Oct 15, 2026
FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing... High Unreviewed
CVE-2026-110830 was published Oct 15, 2026
FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when... High Unreviewed
CVE-2026-110833 was published Oct 15, 2026
Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion High
CVE-2026-72923 was published for Microsoft.OpenApi.Readers (NuGet) Oct 14, 2026
baywet Credited to baywet, gavinbarron, and myDosGyarados gavinbarron gavinbarron
myDosGyarados myDosGyarados
An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to... High Unreviewed
CVE-2026-107349 was published Oct 14, 2026
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that... High Unreviewed
CVE-2026-106627 was published Oct 14, 2026
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that... High Unreviewed
CVE-2026-105902 was published Oct 14, 2026
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that... High Unreviewed
CVE-2026-100137 was published Oct 14, 2026
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that... High Unreviewed
CVE-2026-100138 was published Oct 14, 2026
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that... High Unreviewed
CVE-2026-100139 was published Oct 14, 2026
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote... Moderate Unreviewed
CVE-2026-95696 was published Oct 13, 2026
ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to... High Unreviewed
CVE-2026-75996 was published Oct 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database