Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,521
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,514
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

3,914 advisories

Loading
Uncontrolled resource consumption vulnerability in Apache Struts. An application that exposes an... Unknown Unreviewed
CVE-2026-73634 was published Aug 15, 2026
Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts. When an... High Unreviewed
CVE-2026-73633 was published Aug 14, 2026
A vulnerability was found in TRENDnet TEW-816DRM GURNC4.OT182B-C-TN-R1B028-US.EN. This impacts an... Moderate Unreviewed
CVE-2026-19830 was published Aug 14, 2026
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested,... High Unreviewed
CVE-2026-33818 was published Aug 14, 2026
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to... Moderate Unreviewed
CVE-2026-17078 was published Aug 13, 2026
vLLM: Completion prompt lists fan out into unbounded engine requests Moderate
CVE-2026-73559 was published for vllm (pip) Aug 13, 2026
rexpository Credited to rexpository, jperezdealgaba, and DarkLight1337 jperezdealgaba jperezdealgaba
DarkLight1337 DarkLight1337
Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive... Moderate Unreviewed
CVE-2026-19587 was published Aug 12, 2026
Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny... Moderate Unreviewed
CVE-2026-65785 was published Aug 11, 2026
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that... Moderate Unreviewed
CVE-2026-48434 was published Aug 11, 2026
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that... High Unreviewed
CVE-2026-48439 was published Aug 11, 2026
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that... Moderate Unreviewed
CVE-2026-48443 was published Aug 11, 2026
Uncontrolled resource consumption for some Intel(R) PROSet/Wireless WiFi Software for Windows... Moderate Unreviewed
CVE-2026-20780 was published Aug 11, 2026
Improper validation of length fields in the Apache IoTDB RPC service may allow a remote... High Unreviewed
CVE-2026-44630 was published Aug 10, 2026
The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its... High Unreviewed
CVE-2026-18464 was published Aug 9, 2026
Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an... Moderate Unreviewed
CVE-2026-19113 was published Aug 7, 2026
In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling... High Unreviewed
CVE-2025-63235 was published Aug 7, 2026
pypdf: Possible large memory usage for large /ToUnicode streams Moderate
CVE-2026-71870 was published for pypdf (pip) Aug 7, 2026
idisdi Credited to idisdi and stefan6419846 stefan6419846 stefan6419846
The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX... Moderate Unreviewed
CVE-2026-16265 was published Aug 7, 2026
An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of... High Unreviewed
CVE-2026-64958 was published Aug 6, 2026
Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the ... High Unreviewed
CVE-2026-57819 was published Aug 6, 2026
An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the... High Unreviewed
CVE-2026-67872 was published Aug 6, 2026
An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service... High Unreviewed
CVE-2026-67864 was published Aug 6, 2026
A potential denial of service vulnerability exists in HPE Integrated Lights-Out 6 (iLO 6) prior... Moderate Unreviewed
CVE-2026-63457 was published Aug 5, 2026
Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering High
CVE-2026-71314 was published for nuxt (npm) Aug 5, 2026
manop55555 Credited to manop55555
rclone: Unbounded HTTP CONNECT Response Headers Can Exhaust rclone Memory Moderate
CVE-2026-71310 was published for github.com/rclone/rclone (Go) Aug 5, 2026
cyberlanc3r Credited to cyberlanc3r and ncw ncw ncw
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database