GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,076
Erlang
29
GitHub Actions
19
Go
1,897
Maven
5,000+
npm
3,630
NuGet
638
pip
3,244
Pub
10
RubyGems
862
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+
2,317 advisories
Filter by severity
mintplex-labs/anything-llm is affected by an uncontrolled resource consumption vulnerability in...
Moderate
Unreviewed
CVE-2024-3153
was published
Jun 6, 2024
Denial of service in langchain-community
Moderate
CVE-2024-2965
was published
for
langchain-community
(pip)
Jun 6, 2024
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when...
High
Unreviewed
CVE-2024-36743
was published
Jun 6, 2024
The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service ...
High
Unreviewed
CVE-2024-33655
was published
Jun 6, 2024
Apport does not disable python crash handler before entering chroot
High
Unreviewed
CVE-2022-28657
was published
Jun 5, 2024
Denial of Service (DoS) attack possibility in TYPO3 component Indexed Search
Moderate
GHSA-pmxp-7224-h794
was published
for
typo3/cms
(Composer)
Jun 4, 2024
An uncontrolled resource consumption of file descriptors in SEH Computertechnik utnserver Pro,...
Unknown
Unreviewed
CVE-2024-5422
was published
Jun 4, 2024
A Regular Expression Denial of Service (ReDoS) vulnerability exists in the lunary-ai/lunary...
High
Unreviewed
CVE-2024-4148
was published
Jun 1, 2024
An invalid pointer in the modbus_receive() function of libmodbus v3.1.6 allows attackers to cause...
Moderate
Unreviewed
CVE-2024-36845
was published
May 31, 2024
Duplicate Advisory: Apache Superset uncontrolled resource consumption
Moderate
CVE-2024-23952
was published
for
apache-superset
(pip)
May 30, 2024
•
withdrawn
Soot Infinite Loop vulnerability
High
CVE-2023-46442
was published
for
org.soot-oss:soot
(Maven)
May 24, 2024
Kwik does not discard unused encryption keys
Moderate
CVE-2024-22588
was published
for
tech.kwik:kwik
(Maven)
May 24, 2024
SilverStripe framework XML Quadratic Blowup Attack
Moderate
GHSA-g43w-98wp-m694
was published
for
silverstripe/framework
(Composer)
May 23, 2024
A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions...
Moderate
Unreviewed
CVE-2023-6502
was published
May 23, 2024
A denial of service (DoS) condition was discovered in GitLab CE/EE affecting all versions from 13...
Moderate
Unreviewed
CVE-2024-1947
was published
May 23, 2024
An issue has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11...
Moderate
Unreviewed
CVE-2024-2874
was published
May 23, 2024
In the Linux kernel, the following vulnerability has been resolved:
enetc: Fix illegal access...
High
Unreviewed
CVE-2021-47368
was published
May 21, 2024
In the Linux kernel, the following vulnerability has been resolved:
nexthop: Fix memory leaks in...
High
Unreviewed
CVE-2021-47371
was published
May 21, 2024
In the Linux kernel, the following vulnerability has been resolved:
KVM: SVM: fix missing...
Moderate
Unreviewed
CVE-2021-47389
was published
May 21, 2024
In the Linux kernel, the following vulnerability has been resolved:
scsi: megaraid_sas: Fix...
Moderate
Unreviewed
CVE-2021-47329
was published
May 21, 2024
In the Linux kernel, the following vulnerability has been resolved:
net: sched: fix memory leak...
High
Unreviewed
CVE-2021-47295
was published
May 21, 2024
In the Linux kernel, the following vulnerability has been resolved:
cpufreq: CPPC: Fix potential...
High
Unreviewed
CVE-2021-47313
was published
May 21, 2024
In the Linux kernel, the following vulnerability has been resolved:
isdn: mISDN: netjet: Fix...
Moderate
Unreviewed
CVE-2021-47284
was published
May 21, 2024
In the Linux kernel, the following vulnerability has been resolved:
net: ipv4: fix memory leak...
Moderate
Unreviewed
CVE-2021-47238
was published
May 21, 2024
Stacklok Minder vulnerable to denial of service from maliciously crafted templates
Moderate
CVE-2024-35194
was published
for
github.com/stacklok/minder
(Go)
May 20, 2024
ProTip!
Advisories are also available from the
GraphQL API