Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

4,494 advisories

Loading
A denial-of-service vulnerability has been identified in the Miracast over Infrastructure... Moderate Unreviewed
CVE-2026-70380 was published Oct 26, 2026
There is s denial of service vulnerability in Esri ArcGIS Server versions 12.0 and prior that may... High Unreviewed
CVE-2026-33521 was published Oct 26, 2026
A vulnerability was determined in NocoDB up to 2026.07.0. This vulnerability affects the function... Moderate Unreviewed
CVE-2026-116120 was published Oct 26, 2026
A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is... Moderate Unreviewed
CVE-2026-116095 was published Oct 26, 2026
vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that... High Unreviewed
CVE-2026-116177 was published Oct 25, 2026
ImageMagick before 7.1.2-33 contains a policy bypass vulnerability in the UHDR decoder that... Moderate Unreviewed
CVE-2026-116141 was published Oct 25, 2026
postal-mime: Quadratic CPU consumption when decoding a header of many joinable RFC 2047 base64 encoded words High
GHSA-f2hq-32vh-53cc was published for postal-mime (npm) Oct 23, 2026
vLLM : DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.) High
CVE-2026-114055 was published for vllm (pip) Oct 23, 2026
Chedrian07 Credited to Chedrian07, jperezdealgaba, and DarkLight1337 jperezdealgaba jperezdealgaba
DarkLight1337 DarkLight1337
pypdf: Possible long runtimes for repeated references to the same missing object High
CVE-2026-115572 was published for pypdf (pip) Oct 23, 2026
manop55555 Credited to manop55555
pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up) High
CVE-2026-115585 was published for pypdf (pip) Oct 23, 2026
kyrux29 Credited to kyrux29, loegaire, and stefan6419846 loegaire loegaire
stefan6419846 stefan6419846
Echo: Decompress permits unbounded gzip expansion in v4 High
GHSA-h7wr-284f-5qvc was published for github.com/labstack/echo/v4 (Go) Oct 23, 2026
Echo: BodyDump captures request and response bodies without size limits in v4 High
GHSA-f48p-c9v4-h7xv was published for github.com/labstack/echo/v4 (Go) Oct 23, 2026
Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH Moderate
CVE-2026-115774 was published for Twisted (pip) Oct 23, 2026
arkmarta Credited to arkmarta
Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer High
CVE-2026-115776 was published for Twisted (pip) Oct 23, 2026
arkmarta Credited to arkmarta
Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer High
CVE-2026-115778 was published for Twisted (pip) Oct 23, 2026
arkmarta Credited to arkmarta
Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree High
CVE-2026-115775 was published for Twisted (pip) Oct 23, 2026
arkmarta Credited to arkmarta
e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption... High Unreviewed
CVE-2026-50787 was published Oct 23, 2026
No description provided High Unreviewed
CVE-2026-79894 was published Oct 22, 2026
No description provided High Unreviewed
CVE-2026-79895 was published Oct 22, 2026
wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1... Moderate Unreviewed
CVE-2026-115388 was published Oct 22, 2026
Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains a fuel accounting flaw in... Moderate Unreviewed
CVE-2026-115390 was published Oct 22, 2026
Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vulnerability in the inline... High Unreviewed
CVE-2026-115348 was published Oct 22, 2026
pypdf: Possible long runtimes/large memory usage when retrieving form fields Moderate
CVE-2026-113789 was published for pypdf (pip) Oct 22, 2026
adriank31 Credited to adriank31 and stefan6419846 stefan6419846 stefan6419846
pypdf: Possible large memory usage when parsing arrays and dictionaries Moderate
CVE-2026-113790 was published for pypdf (pip) Oct 22, 2026
26627 Credited to 26627 and stefan6419846 stefan6419846 stefan6419846
pypdf: Possible large memory usage when parsing content streams Moderate
CVE-2026-113791 was published for pypdf (pip) Oct 22, 2026
scanleale Credited to scanleale and stefan6419846 stefan6419846 stefan6419846
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database