GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,324
Erlang
31
GitHub Actions
21
Go
2,087
Maven
5,000+
npm
3,751
NuGet
674
pip
3,437
Pub
12
RubyGems
892
Rust
881
Swift
37
Unreviewed advisories
All unreviewed
5,000+
32 advisories
Filter by severity
In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 (2024.4.1106),...
Moderate
Unreviewed
CVE-2024-8049
was published
Nov 13, 2024
Issue summary: Checking excessively long DH keys or parameters may be very slow.
Impact summary:...
Moderate
Unreviewed
CVE-2023-3817
was published
Jul 31, 2023
Issue summary: Checking excessively long DSA keys or parameters may be very
slow.
Impact summary...
Moderate
Unreviewed
CVE-2024-4603
was published
May 16, 2024
Liferay Portal denial-of-service vulnerability
Moderate
CVE-2024-25144
was published
for
com.liferay.portal:release.dxp.bom
(Maven)
Feb 8, 2024
In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Validate...
Moderate
Unreviewed
CVE-2024-42237
was published
Aug 7, 2024
In the Linux kernel, the following vulnerability has been resolved:
ionic: use...
Moderate
Unreviewed
CVE-2024-42071
was published
Jul 29, 2024
Golang TIFF decoder vulnerable to excessive CPU consumption
Moderate
CVE-2023-29407
was published
for
golang.org/x/image
(Go)
Aug 2, 2023
An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0...
Moderate
Unreviewed
CVE-2023-30226
was published
Jul 12, 2023
LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of...
Moderate
Unreviewed
CVE-2023-1993
was published
Apr 12, 2023
A user authorized to perform database queries may trigger denial of service by issuing specially...
Moderate
Unreviewed
CVE-2018-20805
was published
May 24, 2022
Eclipse Parsson Denial of Service vulnerability
Moderate
CVE-2023-4043
was published
for
org.eclipse.parsson:project
(Maven)
Nov 3, 2023
OctoRPKI crashes when max iterations is reached
Moderate
CVE-2022-3616
was published
for
github.com/cloudflare/cfrpki
(Go)
Oct 31, 2022
JOSE vulnerable to resource exhaustion via specifically crafted JWE
Moderate
CVE-2022-36083
was published
for
jose
(npm)
Sep 16, 2022
The pvscsi_ring_pop_req_descr function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator)...
Moderate
Unreviewed
CVE-2016-7421
was published
May 13, 2022
Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows...
Moderate
Unreviewed
CVE-2023-0411
was published
Jan 26, 2023
libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the...
Moderate
Unreviewed
CVE-2018-5252
was published
May 13, 2022
An issue was discovered in Xpdf 4.00. catalog->getNumPages() in AcroForm.cc allows attackers to...
Moderate
Unreviewed
CVE-2018-18651
was published
May 13, 2022
A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to...
Moderate
Unreviewed
CVE-2017-2330
was published
May 13, 2022
In M3UParser::parse of M3UParser.cpp, there is a memory resource exhaustion due to a large loop...
Moderate
Unreviewed
CVE-2017-13279
was published
May 13, 2022
The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability...
Moderate
Unreviewed
CVE-2017-11360
was published
May 13, 2022
ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage...
Moderate
Unreviewed
CVE-2018-9133
was published
May 13, 2022
An issue was discovered in Free Lossless Image Format (FLIF) 0.3. An attacker can trigger a long...
Moderate
Unreviewed
CVE-2018-11507
was published
May 13, 2022
Excessive Iteration Denial of Service in Apache PDFBox
Moderate
CVE-2021-27807
was published
for
org.apache.pdfbox:pdfbox
(Maven)
Jun 16, 2021
In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e.,...
Moderate
Unreviewed
CVE-2019-9547
was published
May 13, 2022
Dell PowerScale OneFS versions 9.1.0.3 and earlier contain a denial of service vulnerability....
Moderate
Unreviewed
CVE-2021-21565
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API