GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,274
Erlang
31
GitHub Actions
21
Go
2,056
Maven
5,000+
npm
3,740
NuGet
668
pip
3,419
Pub
12
RubyGems
891
Rust
872
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
743 advisories
Filter by severity
An uncontrolled resource consumption vulnerability has been reported to affect several QNAP...
Moderate
Unreviewed
CVE-2022-27600
was published
Dec 19, 2024
An incomplete fix for ose-olm-catalogd-container was issued for the Rapid Reset Vulnerability ...
Moderate
Unreviewed
CVE-2024-12698
was published
Dec 18, 2024
In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due...
Moderate
Unreviewed
CVE-2024-0026
was published
May 7, 2024
The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all...
Moderate
Unreviewed
CVE-2024-12601
was published
Dec 17, 2024
Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before...
Moderate
Unreviewed
CVE-2024-2446
was published
Mar 15, 2024
The Minify HTML plugin for WordPress is vulnerable to Regular Expression Denial of Service (ReDoS...
Moderate
Unreviewed
CVE-2024-12579
was published
Dec 13, 2024
Dell PowerScale OneFS Versions 9.5.0.x through 9.8.0.x contain an uncontrolled resource...
Moderate
Unreviewed
CVE-2024-42426
was published
Dec 9, 2024
A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch...
Moderate
Unreviewed
CVE-2023-5625
was published
Nov 1, 2023
In list_key_entries of utils.rs, there is a possible way to disable user credentials due to...
Moderate
Unreviewed
CVE-2023-21176
was published
Jun 28, 2023
There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL...
Moderate
Unreviewed
CVE-2024-11498
was published
Nov 25, 2024
Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an...
Moderate
Unreviewed
CVE-2024-45420
was published
Nov 19, 2024
A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module. The issue...
Moderate
Unreviewed
CVE-2023-39180
was published
Nov 18, 2024
A vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE...
Moderate
Unreviewed
CVE-2023-44321
was published
Nov 14, 2023
DirectX Graphics Kernel File Denial of Service Vulnerability.
Moderate
Unreviewed
CVE-2022-21918
was published
Jan 12, 2022
Windows Hyper-V Denial of Service Vulnerability.
Moderate
Unreviewed
CVE-2022-21847
was published
Jan 12, 2022
Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability.
Moderate
Unreviewed
CVE-2022-21839
was published
Jan 12, 2022
The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation...
Moderate
Unreviewed
CVE-2024-31152
was published
Oct 30, 2024
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected...
Moderate
Unreviewed
CVE-2024-46891
was published
Nov 12, 2024
A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC...
Moderate
Unreviewed
CVE-2023-42670
was published
Nov 3, 2023
A vulnerability, which was classified as problematic, has been found in Tongda OA 2017 up to 11.7...
Moderate
Unreviewed
CVE-2024-10599
was published
Nov 1, 2024
A vulnerability in the SSH server of Cisco Adaptive Security Appliance (ASA) Software could allow...
Moderate
Unreviewed
CVE-2024-20526
was published
Oct 23, 2024
A denial of service (DoS) vulnerability was found in OpenShift. This flaw allows attackers to...
Moderate
Unreviewed
CVE-2024-50311
was published
Oct 22, 2024
An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow...
Moderate
Unreviewed
CVE-2023-6450
was published
Jan 19, 2024
The login form /Login in ECi Printanista Hub (formerly FMAudit Printscout) through 2022-06-27...
Moderate
Unreviewed
CVE-2022-40306
was published
Sep 16, 2022
A flaw was found in Bombastic, which allows authenticated users to upload compressed (bzip2 or...
Moderate
Unreviewed
CVE-2024-3508
was published
Apr 25, 2024
ProTip!
Advisories are also available from the
GraphQL API