Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,714
Maven
5,000+
npm
5,000+
NuGet
1,110
pip
5,000+
Pub
13
RubyGems
1,151
Rust
1,567
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

436 advisories

Loading
go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion Moderate
CVE-2026-44740 was published for github.com/go-git/go-billy/v5 (Go) May 13, 2026
faran66 Credited to faran66
Mermaid Gantt Charts are vulnerable to an Infinite Loop DoS Moderate
CVE-2026-41150 was published for mermaid (npm) May 11, 2026
aloisklink Credited to aloisklink and Twavesx Twavesx Twavesx
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix infinite loop... Moderate Unreviewed
CVE-2026-23220 was published Feb 18, 2026
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix an... Moderate Unreviewed
CVE-2023-53133 was published May 2, 2025
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call removal to... Moderate Unreviewed
CVE-2026-31642 was published Apr 24, 2026
In the Linux kernel, the following vulnerability has been resolved: can: ucan: Fix infinite loop... Moderate Unreviewed
CVE-2026-23298 was published Mar 25, 2026
A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by... Moderate Unreviewed
CVE-2026-10028 was published May 29, 2026
In the Linux kernel, the following vulnerability has been resolved: serial: core: fix infinite... Moderate Unreviewed
CVE-2026-23472 was published Apr 3, 2026
In the Linux kernel, the following vulnerability has been resolved: mshv: Fix infinite fault... Moderate Unreviewed
CVE-2026-43096 was published May 6, 2026
OpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycle Moderate
CVE-2026-45785 was published for OpenMcdf (NuGet) May 19, 2026
pawlos Credited to pawlos
Pillow has a PDF Parsing Trailer Infinite Loop (DoS) Moderate
CVE-2026-42310 was published for pillow (pip) May 4, 2026
kexinoh Credited to kexinoh
OpenMcdf has an Infinite loop DoS via crafted CFB directory cycle Moderate
CVE-2026-41511 was published for OpenMcdf (NuGet) Apr 22, 2026
pawlos Credited to pawlos
In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop... Moderate Unreviewed
CVE-2024-57940 was published Jan 21, 2025
In the Linux kernel, the following vulnerability has been resolved: ext4: fix infinite loop when... Moderate Unreviewed
CVE-2024-43828 was published Aug 17, 2024
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix loop termination... Moderate Unreviewed
CVE-2024-36288 was published Jun 21, 2024
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: fix... Moderate Unreviewed
CVE-2024-40995 was published Jul 12, 2024
In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid infinite... Moderate Unreviewed
CVE-2024-35982 was published May 20, 2024
SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows... Moderate Unreviewed
CVE-2026-6531 was published Apr 30, 2026
USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows... Moderate Unreviewed
CVE-2026-6534 was published Apr 30, 2026
DLMS/COSEM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 Moderate Unreviewed
CVE-2026-6536 was published Apr 30, 2026
SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows... Moderate Unreviewed
CVE-2026-5407 was published Apr 30, 2026
GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows... Moderate Unreviewed
CVE-2026-6523 was published Apr 30, 2026
MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows... Moderate Unreviewed
CVE-2026-6519 was published Apr 30, 2026
OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14... Moderate Unreviewed
CVE-2026-6520 was published Apr 30, 2026
RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14... Moderate Unreviewed
CVE-2026-6522 was published Apr 30, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database