Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,509
Maven
5,000+
npm
5,000+
NuGet
1,100
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

23 advisories

Loading
Mermaid XY Charts are vulnerable to an infinite loop DoS Moderate
CVE-2026-71436 was published for mermaid (npm) Aug 6, 2026
aloisklink Credited to aloisklink
Improper input validation vulnerability in Samsung Open Source rlottie allows Oversized... Moderate Unreviewed
CVE-2026-18772 was published Aug 4, 2026
veraPDF Parser DoS via PostScript Type 1 Font Programs Moderate
CVE-2026-54081 was published for org.verapdf:parser (Maven) Jul 29, 2026
wodzen Credited to wodzen
veraPDF Parser DoS via PostScript CMap Streams Moderate
CVE-2026-54080 was published for org.verapdf:parser (Maven) Jul 29, 2026
wodzen Credited to wodzen
Using expressions that generate large arrays it is possible to craft a query that creates very... High Unreviewed
CVE-2026-13056 was published Jul 22, 2026
Guzzle: Unbounded response cookies risk denial of service Moderate
CVE-2026-67353 was published for guzzlehttp/guzzle (Composer) Jul 20, 2026
GrahamCampbell Credited to GrahamCampbell
Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it... High Unreviewed
CVE-2026-34183 was published Jun 9, 2026
An authenticated user can cause excess memory usage via bitwise match expression AST processing... High Unreviewed
CVE-2026-8199 was published May 13, 2026
Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows... Moderate Unreviewed
CVE-2026-6533 was published Apr 30, 2026
Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows... Moderate Unreviewed
CVE-2026-6535 was published Apr 30, 2026
SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of... Moderate Unreviewed
CVE-2026-6867 was published Apr 30, 2026
WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial... Moderate Unreviewed
CVE-2026-6869 was published Apr 30, 2026
Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out) High
GHSA-f5v8-v6q3-q4h6 was published for Meridian.Mapping (NuGet) Apr 16, 2026
USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13... Moderate Unreviewed
CVE-2026-3201 was published Feb 25, 2026
weixin4j has Improperly Controlled Sequential Memory Allocation Moderate
CVE-2026-24819 was published for com.foxinmy:weixin4j-base (Maven) Jan 27, 2026
HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service Moderate Unreviewed
CVE-2025-13945 was published Dec 3, 2025
SmallRye Fault Tolerance out-of-memory (OOM) issue High
CVE-2025-2240 was published for io.smallrye:smallrye-fault-tolerance-core (Maven) Mar 12, 2025
claudio4j Credited to claudio4j
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.5),... Moderate Unreviewed
CVE-2023-52891 was published Jul 9, 2024
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS... High Unreviewed
CVE-2024-27804 was published May 14, 2024
The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5,... High Unreviewed
CVE-2024-27796 was published May 14, 2024
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when... Moderate Unreviewed
CVE-2024-2511 was published Apr 8, 2024
The code that processes control channel messages sent to `named` calls certain functions... High Unreviewed
CVE-2023-3341 was published Sep 20, 2023
An Improperly Controlled Sequential Memory Allocation vulnerability in the Juniper Networks Deep... Moderate Unreviewed
CVE-2023-28968 was published Apr 18, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database