Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,596
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

2,400 advisories

Loading
Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows... High Unreviewed
CVE-2026-111383 was published Oct 16, 2026
Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file... High Unreviewed
CVE-2026-111384 was published Oct 16, 2026
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized... High Unreviewed
CVE-2026-109468 was published Oct 15, 2026
Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation Moderate
CVE-2026-102682 was published for pipecat-ai (pip) Oct 15, 2026
infycore Credited to infycore and agent-kira agent-kira agent-kira
kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression Moderate
CVE-2026-100350 was published for github.com/getkin/kin-openapi (Go) Oct 15, 2026
matiasinsaurralde Credited to matiasinsaurralde
MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion Moderate
CVE-2026-59951 was published for mcp (pip) Oct 15, 2026
rharang Credited to rharang, evilgensec, Madan301, subchat, and nickelsec evilgensec evilgensec
Madan301 Madan301 subchat subchat nickelsec nickelsec
react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS High
CVE-2026-104827 was published for react/http (Composer) Oct 15, 2026
EQSTLab Credited to EQSTLab, WyriHaximus, and 232-323 WyriHaximus WyriHaximus
232-323 232-323
Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder High
CVE-2026-77622 was published for github.com/BishopFox/sliver (Go) Oct 15, 2026
CalebKingan Credited to CalebKingan and Squ1shification Squ1shification Squ1shification
A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand... Moderate Unreviewed
CVE-2026-110927 was published Oct 15, 2026
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... High Unreviewed
CVE-2026-102464 was published Oct 15, 2026
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... High Unreviewed
CVE-2026-102465 was published Oct 15, 2026
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... High Unreviewed
CVE-2026-102467 was published Oct 15, 2026
In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy... High Unreviewed
CVE-2026-102475 was published Oct 15, 2026
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption... High Unreviewed
CVE-2026-110843 was published Oct 15, 2026
Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion High
CVE-2026-72923 was published for Microsoft.OpenApi.Readers (NuGet) Oct 14, 2026
baywet Credited to baywet, gavinbarron, and myDosGyarados gavinbarron gavinbarron
myDosGyarados myDosGyarados
An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of... High Unreviewed
CVE-2026-102048 was published Oct 14, 2026
An Allocation of Resources Without Limits or Throttling vulnerability in rpd, the routing... High Unreviewed
CVE-2026-101971 was published Oct 14, 2026
A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during... Moderate Unreviewed
CVE-2026-86561 was published Oct 14, 2026
BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in... Moderate Unreviewed
CVE-2026-110595 was published Oct 14, 2026
OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer... Moderate Unreviewed
CVE-2026-110591 was published Oct 14, 2026
OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons... Moderate Unreviewed
CVE-2026-110262 was published Oct 14, 2026
Allocation of resources without limits or throttling in SQL Server allows an authorized attacker... Moderate Unreviewed
CVE-2026-88084 was published Oct 13, 2026
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker... Moderate Unreviewed
CVE-2026-96300 was published Oct 13, 2026
Allocation of resources without limits or throttling in Active Directory Federation Services (AD... High Unreviewed
CVE-2026-85321 was published Oct 13, 2026
Allocation of resources without limits or throttling in Active Directory Federation Services (AD... High Unreviewed
CVE-2026-85319 was published Oct 13, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database