Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,831
Erlang
36
GitHub Actions
33
Go
2,451
Maven
5,000+
npm
4,073
NuGet
723
pip
3,868
Pub
12
RubyGems
943
Rust
1,010
Swift
39
Unreviewed advisories
All unreviewed
5,000+

27 advisories

Loading
An Expected Behavior Violation vulnerability in the routing protocol daemon (rpd) of Juniper... High Unreviewed
CVE-2025-52953 was published Jul 11, 2025
LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class Moderate
CVE-2025-6211 was published for llama-index (pip) Jul 10, 2025
LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions Moderate
CVE-2025-3044 was published for llama-index-readers-papers (pip) Jul 7, 2025
A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions).... Moderate Unreviewed
CVE-2025-40555 was published May 13, 2025
cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b":... Low Unreviewed
CVE-2023-26819 was published Apr 20, 2025
In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the... Moderate Unreviewed
CVE-2025-32728 was published Apr 10, 2025
SageMaker Workflow component allows possibility of MD5 hash collisions Moderate
CVE-2025-0508 was published for sagemaker (pip) Mar 20, 2025
Expected Behavior Violation vulnerability in Apache Traffic Server. This issue affects Apache... Moderate Unreviewed
CVE-2024-56202 was published Mar 6, 2025
Unexpected visibility of environment variable configurations in @backstage/plugin-app-backend Moderate
CVE-2024-47762 was published for @backstage/plugin-app-backend (npm) Oct 3, 2024
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows... Moderate Unreviewed
CVE-2024-8690 was published Sep 11, 2024
It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table... Moderate Unreviewed
CVE-2024-7246 was published Aug 6, 2024
LoLLMS vulnerable to Expected Behavior Violation High
CVE-2024-6281 was published for lollms (pip) Jul 20, 2024
Failure to properly synchronize user's permissions in UAA in Cloud Foundry Foundation v40.17.0... Low Unreviewed
CVE-2024-38806 was published Jul 18, 2024
Apollo Router vulnerable to Critical Regression In Query Plan Cache Critical
CVE-2024-32971 was published for apollo-router (Rust) May 2, 2024
xuorig o0Ignition0o
peakematt IvanGoncharov Geal glasser jasonbarnett667 abernix
Unauthenticated Nonce Increment in snow Low
CVE-2024-58265 was published for snow (Rust) Jan 24, 2024
Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that... Moderate Unreviewed
CVE-2023-6129 was published Jan 9, 2024
Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that... High Unreviewed
CVE-2023-4807 was published Sep 8, 2023
sweetalert2 contains potentially undesirable behavior Low
GHSA-mrr8-v49w-3333 was published for sweetalert2 (npm) Jul 10, 2023
limonte
gRPC connection termination issue Moderate
CVE-2023-32732 was published for grpc (RubyGems) Jul 6, 2023
jonasfj tal-sealsecurity
Connection confusion in gRPC High
CVE-2023-32731 was published for grpc (RubyGems) Jul 5, 2023
jmatosgrafana picatz
jonasfj tal-sealsecurity
A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be... Moderate Unreviewed
CVE-2023-2088 was published May 12, 2023
A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could... Moderate Unreviewed
CVE-2022-3344 was published Oct 25, 2022
WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller... Moderate Unreviewed
CVE-2022-3281 was published Oct 17, 2022
An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for... Moderate Unreviewed
CVE-2019-5062 was published May 24, 2022
An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could... Moderate Unreviewed
CVE-2019-5061 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database