Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,718
Maven
5,000+
npm
5,000+
NuGet
1,116
pip
5,000+
Pub
13
RubyGems
1,152
Rust
1,568
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

357 advisories

Loading
A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19... Moderate Unreviewed
CVE-2022-42721 was published Oct 14, 2022
Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other... Moderate Unreviewed
CVE-2014-0148 was published Sep 30, 2022
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively... Moderate Unreviewed
CVE-2022-31628 was published Sep 29, 2022
A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where... Moderate Unreviewed
CVE-2022-28886 was published Sep 25, 2022
Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0... Moderate Unreviewed
CVE-2022-3190 was published Sep 14, 2022
wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the... Moderate Unreviewed
CVE-2021-44718 was published Sep 3, 2022
An infinite loop may be triggered in display_debug_abbrev() function in binutils/dwarf.c while... Moderate Unreviewed
CVE-2022-38128 was published Sep 2, 2022
An issue in AP4_SgpdAtom::AP4_SgpdAtom() of Bento4-1.6.0-639 allows attackers to cause a Denial... Moderate Unreviewed
CVE-2022-35165 was published Aug 19, 2022
libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG:... Moderate Unreviewed
CVE-2022-35166 was published Aug 19, 2022
GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a (version v1.0.1 onwards)... Moderate Unreviewed
CVE-2021-40592 was published Jun 9, 2022
Irfanview v4.53 was discovered to contain an infinity loop via JPEG2000!ShowPlugInSaveOptions_W... Moderate Unreviewed
CVE-2020-23566 was published May 24, 2022
An issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end... Moderate Unreviewed
CVE-2021-42715 was published May 24, 2022
In an MPLS P2MP environment a Loop with Unreachable Exit Condition vulnerability in the routing... Moderate Unreviewed
CVE-2021-31363 was published May 24, 2022
An issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send... Moderate Unreviewed
CVE-2021-42084 was published May 24, 2022
Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS... Moderate Unreviewed
CVE-2021-29365 was published May 24, 2022
A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive... Moderate Unreviewed
CVE-2021-33599 was published May 24, 2022
long running loops in grant table handling In order to properly monitor resource use, Xen... Moderate Unreviewed
CVE-2021-28698 was published May 24, 2022
A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14... Moderate Unreviewed
CVE-2021-3679 was published May 24, 2022
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization ... Moderate Unreviewed
CVE-2021-34332 was published May 24, 2022
Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the... Moderate Unreviewed
CVE-2020-18442 was published May 24, 2022
A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of... Moderate Unreviewed
CVE-2021-3468 was published May 24, 2022
A flaw was found in PDFResurrect in version 0.22b. There is an infinite loop in... Moderate Unreviewed
CVE-2021-3508 was published May 24, 2022
An issue was discovered in the Linux kernel before 5.8. arch/x86/kvm/svm/svm.c allows a... Moderate Unreviewed
CVE-2020-36310 was published May 24, 2022
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an... Moderate Unreviewed
CVE-2021-22197 was published May 24, 2022
A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in... Moderate Unreviewed
CVE-2021-3416 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database