Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
50
GitHub Actions
50
Go
3,673
Maven
5,000+
npm
5,000+
NuGet
932
pip
4,891
Pub
13
RubyGems
1,051
Rust
1,315
Swift
53
Unreviewed advisories
All unreviewed
5,000+

29 advisories

Loading
Inefficient Algorithmic Complexity in Apache Santuario XML Security Moderate
CVE-2013-2172 was published for org.apache.santuario:xmlsec (Maven) May 13, 2022
MarkLee131 Credited to MarkLee131
An issue was discovered in Total.js CMS 12.0.0. A low privilege user can perform a simple... Moderate Unreviewed
CVE-2019-15955 was published May 24, 2022
A vulnerability was found in Dreamer CMS up to 4.1.3. It has been declared as problematic. This... Moderate Unreviewed
CVE-2023-2473 was published May 2, 2023
PyPDF2 quadratic runtime with malformed PDF missing xref marker Moderate
CVE-2023-36810 was published for PyPDF2 (pip) Jun 30, 2023
Several quadratic complexity bugs may lead to denial of service in Commonmarker Moderate
GHSA-7vh7-fw88-wj87 was published for commonmarker (RubyGems) Aug 8, 2023
The dormakaba Saflok system before the November 2023 software update allows an attacker to unlock... Moderate Unreviewed
CVE-2024-29916 was published Mar 21, 2024
In lj_str_hash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function (used during... Moderate Unreviewed
CVE-2024-39702 was published Jul 23, 2024
A vulnerability in the Transport Layer Security (TLS) protocol implementation of Cisco&nbsp... Moderate Unreviewed
CVE-2020-3548 was published Nov 18, 2024
A denial of service (DoS) condition was discovered in GitLab CE/EE affecting all versions from 13... Moderate Unreviewed
CVE-2024-11828 was published Nov 26, 2024
A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior... Moderate Unreviewed
CVE-2024-8237 was published Nov 26, 2024
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.4.5... Moderate Unreviewed
CVE-2024-8177 was published Nov 26, 2024
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 17.5.5... Moderate Unreviewed
CVE-2024-6324 was published Jan 9, 2025
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an... Moderate Unreviewed
CVE-2024-12243 was published Feb 10, 2025
A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a... Moderate Unreviewed
CVE-2024-12133 was published Feb 10, 2025
A hash collision vulnerability (in the hash table used to manage connections) in LSQUIC (aka... Moderate Unreviewed
CVE-2025-24947 was published Feb 20, 2025
The hash table used to manage connections in picoquic before b80fd3f uses a weak hash function,... Moderate Unreviewed
CVE-2025-24946 was published Feb 20, 2025
Kwik hash collision vulnerability Moderate
CVE-2025-23020 was published for tech.kwik:kwik (Maven) Feb 20, 2025
encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and... Moderate Unreviewed
CVE-2025-30348 was published Mar 21, 2025
Netty QUIC hash collision DoS attack Moderate
CVE-2025-29908 was published for io.netty.incubator:netty-incubator-codec-quic (Maven) Mar 31, 2025
Due to the design of the name constraint checking algorithm, the processing time of some inputs... Moderate Unreviewed
CVE-2025-58187 was published Oct 30, 2025
Django is vulnerable to DoS via XML serializer text extraction Moderate
CVE-2025-64460 was published for Django (pip) Dec 2, 2025
When building nested elements using xml.dom.minidom methods such as appendChild() that have a... Moderate Unreviewed
CVE-2025-12084 was published Dec 3, 2025
A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU ... Moderate Unreviewed
CVE-2025-14831 was published Feb 9, 2026
golang.org/x/net/html has a Quadratic Parsing Complexity issue Moderate
CVE-2025-47911 was published for golang.org/x/net/html (Go) Feb 12, 2026
pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams Moderate
CVE-2026-28804 was published for pypdf (pip) Mar 2, 2026
kule500 Credited to kule500 and stefan6419846 stefan6419846 stefan6419846
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database