Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,121
NuGet
735
pip
3,942
Pub
12
RubyGems
945
Rust
1,018
Swift
39
Unreviewed advisories
All unreviewed
5,000+

617 advisories

Loading
EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown... High Unreviewed
CVE-2023-45232 was published Jan 16, 2024
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file Moderate
CVE-2024-25710 was published for org.apache.commons:commons-compress (Maven) Feb 19, 2024
oscerd anonymous-nlp-student
In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests... Moderate Unreviewed
CVE-2025-1695 was published Mar 4, 2025
OpenDJ Denial of Service (DoS) using alias loop High
CVE-2025-27497 was published for org.openidentityplatform.opendj:opendj-server-legacy (Maven) Mar 5, 2025
hannes96
phpseclib Infinite Loop vulnerability High
CVE-2023-27560 was published for phpseclib/phpseclib (Composer) Mar 3, 2023
janedbal
A vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All... High Unreviewed
CVE-2021-25663 was published May 24, 2022
A vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All... High Unreviewed
CVE-2021-25664 was published May 24, 2022
In the Linux kernel, the following vulnerability has been resolved: nvmet: Fix crash when a... Moderate Unreviewed
CVE-2025-21850 was published Mar 12, 2025
In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix a crash if -... Moderate Unreviewed
CVE-2021-47159 was published Mar 25, 2024
In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid infinite loop to... Moderate Unreviewed
CVE-2022-49317 was published Mar 14, 2025
In Azle, calling `setTimer` causes infinite loop of timers High
CVE-2025-29776 was published for azle (npm) Mar 14, 2025
Improper Handling of Exceptional Conditions vulnerability in Daurnimator HTTP Library for Lua... High Unreviewed
CVE-2023-4540 was published Sep 5, 2023
HAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote... High Unreviewed
CVE-2024-45506 was published Sep 4, 2024
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Synchronize... Moderate Unreviewed
CVE-2023-52635 was published Apr 2, 2024
In the Linux kernel, the following vulnerability has been resolved: netdevsim: avoid potential... Moderate Unreviewed
CVE-2024-26681 was published Apr 2, 2024
In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix task hung while... Moderate Unreviewed
CVE-2024-26780 was published Apr 4, 2024
Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This... Moderate Unreviewed
CVE-2025-2838 was published Mar 27, 2025
In the Linux kernel, the following vulnerability has been resolved: ext4: add error checking to... Moderate Unreviewed
CVE-2021-47406 was published May 21, 2024
mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU... Moderate Unreviewed
CVE-2004-0748 was published Apr 29, 2022
ts-asn1-der has Incorrect DER Encoding of Numbers Leading to Denial of Service and Incorrect Value Representation Moderate
CVE-2025-32029 was published for @apeleghq/asn1-der (npm) Apr 7, 2025
Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1... Moderate Unreviewed
CVE-2022-4345 was published Jan 12, 2023
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential... Moderate Unreviewed
CVE-2024-27032 was published May 1, 2024
smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows... Moderate Unreviewed
CVE-2009-2906 was published May 2, 2022
avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a... Moderate Unreviewed
CVE-2011-1002 was published May 17, 2022
The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does... Moderate Unreviewed
CVE-2011-2213 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database