Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,455
Maven
5,000+
npm
5,000+
NuGet
1,090
pip
5,000+
Pub
13
RubyGems
1,135
Rust
1,509
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

1,959 advisories

Loading
The Apache Traffic Server ts_lua plugin mishandles initialization, transform context, and per... High Unreviewed
CVE-2026-58182 was published Jul 29, 2026
Apache Traffic Server drops the per-stream buffer cap when dechunking HTTP/2 or HTTP/3 responses,... High Unreviewed
CVE-2026-65324 was published Jul 29, 2026
Apache Traffic Server can be crashed or driven to resource exhaustion by abusive HTTP/2 framing... High Unreviewed
CVE-2026-58151 was published Jul 29, 2026
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0... High Unreviewed
CVE-2026-14981 was published Jul 28, 2026
Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This... High Unreviewed
CVE-2026-66299 was published Jul 28, 2026
Addressing certain issues, in particular related to operations which may take excessively long... High Unreviewed
CVE-2026-42493 was published Jul 28, 2026
QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding High
CVE-2026-54609 was published for com.quietterminal:qti-neon (Maven) Jul 28, 2026
An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via... High Unreviewed
CVE-2025-63913 was published Jul 28, 2026
Pivotick contains an uncontrolled-recursion vulnerability when processing caller-supplied graph... High Unreviewed
CVE-2026-66920 was published Jul 28, 2026
libp2p: yamux connection DoS via oversized data frame High
GHSA-hmj8-5xmh-5573 was published for libp2p (pip) Jul 24, 2026
tahaafarooq Credited to tahaafarooq
Shescape: Quadratic-time denial of service in the flag-protection High
GHSA-gm3r-q2wp-hw87 was published for shescape (npm) Jul 24, 2026
oran-s Credited to oran-s and ericcornelissen ericcornelissen ericcornelissen
brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash High
CVE-2026-14257 was published for brace-expansion (npm) Jul 24, 2026
bnbdr Credited to bnbdr
@anephenix/hub: Unauthenticated WebSocket RPC Waiter Resource Exhaustion High
GHSA-g5vv-q72c-7j78 was published for @anephenix/hub (npm) Jul 24, 2026
It is possible to bypass the maximum number of normalized policy alternatives that was introduced... High Unreviewed
CVE-2026-66143 was published Jul 24, 2026
Although remote policy references are not retrieved during policy normalization, if they are... High Unreviewed
CVE-2026-66144 was published Jul 24, 2026
Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids... High Unreviewed
CVE-2026-66142 was published Jul 24, 2026
react-server-dom: Denial of Service in Server Functions High
CVE-2026-44907 was published for react-server-dom-parcel (npm) Jul 24, 2026
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD... High Unreviewed
CVE-2026-60425 was published Jul 22, 2026
Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion High
GHSA-v74w-7mr3-4qg3 was published for io.netty:netty-codec-xml (Maven) Jul 24, 2026
violetagg Credited to violetagg
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component:... High Unreviewed
CVE-2026-60382 was published Jul 22, 2026
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD... High Unreviewed
CVE-2026-60436 was published Jul 22, 2026
httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling High
CVE-2026-59939 was published for httplib2 (pip) Jul 24, 2026
mauriceng98 Credited to mauriceng98
React Router: Unauthenticated Denial of Service via Inefficient Route Matching High
CVE-2026-55685 was published for react-router (npm) Jul 24, 2026
dinhvaren Credited to dinhvaren
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ... High Unreviewed
CVE-2026-60301 was published Jul 22, 2026
Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). ... High Unreviewed
CVE-2026-60314 was published Jul 22, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database