Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,596
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

1,166 advisories

Loading
Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows... High Unreviewed
CVE-2026-111383 was published Oct 16, 2026
Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file... High Unreviewed
CVE-2026-111384 was published Oct 16, 2026
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized... High Unreviewed
CVE-2026-109468 was published Oct 15, 2026
react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS High
CVE-2026-104827 was published for react/http (Composer) Oct 15, 2026
EQSTLab Credited to EQSTLab, WyriHaximus, and 232-323 WyriHaximus WyriHaximus
232-323 232-323
Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder High
CVE-2026-77622 was published for github.com/BishopFox/sliver (Go) Oct 15, 2026
CalebKingan Credited to CalebKingan and Squ1shification Squ1shification Squ1shification
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... High Unreviewed
CVE-2026-102464 was published Oct 15, 2026
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... High Unreviewed
CVE-2026-102465 was published Oct 15, 2026
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],... High Unreviewed
CVE-2026-102467 was published Oct 15, 2026
In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy... High Unreviewed
CVE-2026-102475 was published Oct 15, 2026
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption... High Unreviewed
CVE-2026-110843 was published Oct 15, 2026
Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion High
CVE-2026-72923 was published for Microsoft.OpenApi.Readers (NuGet) Oct 14, 2026
baywet Credited to baywet, gavinbarron, and myDosGyarados gavinbarron gavinbarron
myDosGyarados myDosGyarados
An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of... High Unreviewed
CVE-2026-102048 was published Oct 14, 2026
An Allocation of Resources Without Limits or Throttling vulnerability in rpd, the routing... High Unreviewed
CVE-2026-101971 was published Oct 14, 2026
Allocation of resources without limits or throttling in Active Directory Federation Services (AD... High Unreviewed
CVE-2026-85321 was published Oct 13, 2026
Allocation of resources without limits or throttling in Active Directory Federation Services (AD... High Unreviewed
CVE-2026-85319 was published Oct 13, 2026
Allocation of resources without limits or throttling in Active Directory Federation Services (AD... High Unreviewed
CVE-2026-83645 was published Oct 13, 2026
Allocation of resources without limits or throttling in OpenSSH for Windows allows an... High Unreviewed
CVE-2026-70163 was published Oct 13, 2026
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized... High Unreviewed
CVE-2026-70133 was published Oct 13, 2026
Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability High
CVE-2026-96959 was published for System.Security.Cryptography.Xml (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability High
CVE-2026-96236 was published for Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability High
CVE-2026-70181 was published for Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet) Oct 13, 2026
Microsoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service Vulnerability High
CVE-2026-70159 was published for Microsoft.AspNetCore.SignalR.Common (NuGet) Oct 13, 2026
A denial-of-service security issue exists in the affected product and version. The security issue... High Unreviewed
CVE-2026-12656 was published Oct 13, 2026
FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that... High Unreviewed
CVE-2026-109947 was published Oct 13, 2026
Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory allocation vulnerability that... High Unreviewed
CVE-2026-109351 was published Oct 12, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database