Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,683
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,532
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

432 advisories

Loading
pypdf: Possible infinite loop for TreeObject.insert_child Moderate
CVE-2026-84309 was published for pypdf (pip) Sep 1, 2026
alienkeric Credited to alienkeric and stefan6419846 stefan6419846 stefan6419846
In Reactor Core, applications that use the Flux.bufferTimeout operator with fairBackpressure... Moderate Unreviewed
CVE-2026-47863 was published Aug 27, 2026
An attacker who can publish to a queue consumed by an application that has enabled message... Moderate Unreviewed
CVE-2026-47860 was published Aug 27, 2026
GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 19.1.7, 19.2... Moderate Unreviewed
CVE-2025-10903 was published Aug 26, 2026
In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible Moderate Unreviewed
CVE-2026-68762 was published Aug 17, 2026
A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An... Moderate Unreviewed
CVE-2026-13002 was published Aug 14, 2026
A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local... Moderate Unreviewed
CVE-2026-18726 was published Aug 13, 2026
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0... Moderate Unreviewed
CVE-2026-11932 was published Aug 12, 2026
Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows... Moderate Unreviewed
CVE-2026-72712 was published Aug 11, 2026
Mermaid XY Charts are vulnerable to an infinite loop DoS Moderate
CVE-2026-71436 was published for mermaid (npm) Aug 6, 2026
aloisklink Credited to aloisklink
A flaw was found in libkcapi. A local attacker can influence an application that uses the... Moderate Unreviewed
CVE-2026-71227 was published Aug 5, 2026
re2: Global `String.prototype.match` with an empty-matchable pattern never advances → infinite loop with unbounded native memory growth (DoS) Moderate
CVE-2026-68499 was published for re2 (npm) Jul 31, 2026
ataberk-xyz Credited to ataberk-xyz
In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on... Moderate Unreviewed
CVE-2026-64290 was published Jul 25, 2026
ImageMagick: Infinite Loop in connected-components when providing invalid arguments Moderate
CVE-2026-55595 was published for Magick.NET-Q16-AnyCPU (NuGet) Jul 24, 2026
rexpository Credited to rexpository
A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size... Moderate Unreviewed
CVE-2026-59843 was published Jul 21, 2026
Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service Moderate
CVE-2026-59203 was published for pillow (pip) Jul 20, 2026
jiagongzheng-stack Credited to jiagongzheng-stack
protobufjs: Denial of Service via infinite loop in .proto option parsing Moderate
CVE-2026-59877 was published for protobufjs (npm) Jul 20, 2026
bilerden Credited to bilerden
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a... Moderate Unreviewed
CVE-2026-7771 was published Jul 17, 2026
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services ... Moderate Unreviewed
CVE-2026-50324 was published Jul 14, 2026
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the... Moderate Unreviewed
CVE-2026-62642 was published Jul 14, 2026
pypdf: Possible infinite loop when processing threads/articles in writer Moderate
CVE-2026-54651 was published for pypdf (pip) Jul 9, 2026
k0w4lzk1 Credited to k0w4lzk1 and stefan6419846 stefan6419846 stefan6419846
GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single... Moderate Unreviewed
CVE-2026-56289 was published Jul 9, 2026
Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow... Moderate Unreviewed
CVE-2026-15163 was published Jul 8, 2026
FatFs prior to R0.16 that use GPT scanning with 'FF_LBA64 = 1' contains an issue where an... Moderate Unreviewed
CVE-2026-6684 was published Jul 1, 2026
A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially... Moderate Unreviewed
CVE-2026-14258 was published Jul 1, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database