Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,856
Erlang
36
GitHub Actions
36
Go
2,488
Maven
5,000+
npm
4,104
NuGet
735
pip
3,923
Pub
12
RubyGems
945
Rust
1,017
Swift
39
Unreviewed advisories
All unreviewed
5,000+

27 advisories

Loading
The monitor barrier of the affected products insufficiently blocks data from being forwarded over... Critical Unreviewed
CVE-2019-6569 was published Apr 30, 2022
WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller... Moderate Unreviewed
CVE-2022-3281 was published Oct 17, 2022
An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could... Moderate Unreviewed
CVE-2019-5061 was published May 24, 2022
An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for... Moderate Unreviewed
CVE-2019-5062 was published May 24, 2022
A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be... Moderate Unreviewed
CVE-2023-2088 was published May 12, 2023
Expected Behavior Violation in Apache Tomcat Critical
CVE-2017-5651 was published for org.apache.tomcat.embed:tomcat-embed-core (Maven) May 13, 2022
sunSUNQ westonsteimel
Apollo Router vulnerable to Critical Regression In Query Plan Cache Critical
CVE-2024-32971 was published for apollo-router (Rust) May 2, 2024
xuorig o0Ignition0o
peakematt IvanGoncharov Geal glasser jasonbarnett667 abernix
Failure to properly synchronize user's permissions in UAA in Cloud Foundry Foundation v40.17.0... Low Unreviewed
CVE-2024-38806 was published Jul 18, 2024
LoLLMS vulnerable to Expected Behavior Violation High
CVE-2024-6281 was published for lollms (pip) Jul 20, 2024
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows... Moderate Unreviewed
CVE-2024-8690 was published Sep 11, 2024
Unexpected visibility of environment variable configurations in @backstage/plugin-app-backend Moderate
CVE-2024-47762 was published for @backstage/plugin-app-backend (npm) Oct 3, 2024
Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that... Moderate Unreviewed
CVE-2023-6129 was published Jan 9, 2024
Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that... High Unreviewed
CVE-2023-4807 was published Sep 8, 2023
Expected Behavior Violation vulnerability in Apache Traffic Server. This issue affects Apache... Moderate Unreviewed
CVE-2024-56202 was published Mar 6, 2025
SageMaker Workflow component allows possibility of MD5 hash collisions Moderate
CVE-2025-0508 was published for sagemaker (pip) Mar 20, 2025
cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b":... Low Unreviewed
CVE-2023-26819 was published Apr 20, 2025
A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could... Moderate Unreviewed
CVE-2022-3344 was published Oct 25, 2022
In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the... Moderate Unreviewed
CVE-2025-32728 was published Apr 10, 2025
A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions).... Moderate Unreviewed
CVE-2025-40555 was published May 13, 2025
LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions Moderate
CVE-2025-3044 was published for llama-index-readers-papers (pip) Jul 7, 2025
LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class Moderate
CVE-2025-6211 was published for llama-index (pip) Jul 10, 2025
An Expected Behavior Violation vulnerability in the routing protocol daemon (rpd) of Juniper... High Unreviewed
CVE-2025-52953 was published Jul 11, 2025
It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table... Moderate Unreviewed
CVE-2024-7246 was published Aug 6, 2024
Unauthenticated Nonce Increment in snow Low
CVE-2024-58265 was published for snow (Rust) Jan 24, 2024
Connection confusion in gRPC High
CVE-2023-32731 was published for grpc (RubyGems) Jul 5, 2023
jmatosgrafana picatz
jonasfj tal-sealsecurity
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database