Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
91
GitHub Actions
54
Go
4,194
Maven
5,000+
npm
5,000+
NuGet
1,021
pip
5,000+
Pub
13
RubyGems
1,102
Rust
1,422
Swift
61
Unreviewed advisories
All unreviewed
5,000+

16 advisories

Loading
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS... Moderate Unreviewed
CVE-2026-27145 was published Jun 3, 2026
An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad... Moderate Unreviewed
CVE-2026-5950 was published May 20, 2026
A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables... Moderate Unreviewed
CVE-2026-0243 was published May 13, 2026
Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before... Moderate Unreviewed
CVE-2026-41606 was published Apr 28, 2026
Liquid Studio 2.17 contains a denial of service vulnerability that allows local attackers to... Moderate Unreviewed
CVE-2019-25624 was published Mar 23, 2026
Liferay Portal has unchecked input for loop condition vulnerability in XML-RPC Moderate
CVE-2025-43801 was published for com.liferay.portal:com.liferay.portal.impl (Maven) Sep 16, 2025
SAP Business Planning and Consolidation allows an authenticated standard user to call a function... Moderate Unreviewed
CVE-2025-42930 was published Sep 9, 2025
An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume... Moderate Unreviewed
CVE-2024-13930 was published May 22, 2025
An Unchecked Input for Loop Condition in RT-Labs P-Net version 1.0.1 or earlier allows an... Moderate Unreviewed
CVE-2025-32399 was published May 7, 2025
NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling... Moderate Unreviewed
CVE-2024-8508 was published Oct 3, 2024
Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary... Moderate Unreviewed
CVE-2024-4603 was published May 16, 2024
Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact... Moderate Unreviewed
CVE-2023-6237 was published Apr 25, 2024
KaTeX's maxExpand bypassed by Unicode sub/superscripts Moderate
CVE-2024-28244 was published for katex (npm) Mar 25, 2024
jupenur Credited to jupenur, ronkok, and edemaine ronkok ronkok
edemaine edemaine
KaTeX's maxExpand bypassed by `\edef` Moderate
CVE-2024-28243 was published for katex (npm) Mar 25, 2024
jupenur Credited to jupenur, edemaine, and Wenxin-Jiang edemaine edemaine
Wenxin-Jiang Wenxin-Jiang
Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary:... Moderate Unreviewed
CVE-2023-3817 was published Jul 31, 2023
Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary:... Moderate Unreviewed
CVE-2023-3446 was published Jul 19, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database