GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,373
Erlang
33
GitHub Actions
22
Go
2,135
Maven
5,000+
npm
3,797
NuGet
687
pip
3,478
Pub
12
RubyGems
896
Rust
897
Swift
38
Unreviewed advisories
All unreviewed
5,000+
1,067 advisories
Filter by severity
vLLM Denial of Service via the best_of parameter
Moderate
CVE-2024-8939
was published
for
vllm
(pip)
Sep 17, 2024
In Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to cause a denial of service ...
Moderate
Unreviewed
CVE-2018-19881
was published
May 14, 2022
Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications...
Moderate
Unreviewed
CVE-2023-21925
was published
Apr 18, 2023
A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used...
Moderate
Unreviewed
CVE-2023-42669
was published
Nov 6, 2023
An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The...
Moderate
Unreviewed
CVE-2024-33881
was published
Jun 24, 2024
An inconsistent user interface issue was addressed with improved state management. This issue is...
Moderate
Unreviewed
CVE-2023-40408
was published
Oct 25, 2023
A vulnerability has been identified in CP1604 (All versions < V2.8), CP1616 (All versions < V2.8)...
Moderate
Unreviewed
CVE-2019-10923
was published
May 24, 2022
Bouncy Castle Denial of Service (DoS)
Moderate
CVE-2023-33202
was published
for
org.bouncycastle:bcpkix-jdk18on
(Maven)
Nov 23, 2023
OCI image importer memory exhaustion in github.com/containerd/containerd
Moderate
CVE-2023-25153
was published
for
github.com/containerd/containerd
(Go)
Feb 16, 2023
IObit Malware Fighter v11.0.0.1274 is vulnerable to a Denial of Service vulnerability by...
Moderate
Unreviewed
CVE-2024-0430
was published
Jan 22, 2024
Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the...
Moderate
Unreviewed
CVE-2024-23441
was published
Jan 29, 2024
An uncontrolled resource consumption vulnerability issue that could arise by sending crafted...
Moderate
Unreviewed
CVE-2023-22819
was published
Feb 6, 2024
Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2_error at...
Moderate
Unreviewed
CVE-2023-46361
was published
Oct 31, 2023
PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component (*Column)...
Moderate
Unreviewed
CVE-2024-41434
was published
Sep 3, 2024
IBM AIX's 7.3 Python implementation could allow a non-privileged local user to exploit a...
Moderate
Unreviewed
CVE-2023-45167
was published
Nov 10, 2023
An issue was discovered in GitLab CE/EE affecting all versions starting from 9.2 prior to 16.11.5...
Moderate
Unreviewed
CVE-2024-1493
was published
Jun 27, 2024
Vulnerability in the Oracle Database Portable Clusterware component of Oracle Database Server. ...
Moderate
Unreviewed
CVE-2024-21126
was published
Jul 17, 2024
A vulnerable API method in M-Files Server before 23.12.13195.0 allows for uncontrolled resource...
Moderate
Unreviewed
CVE-2023-6910
was published
Dec 20, 2023
A possibility of unwanted server memory consumption was detected through the obsolete...
Moderate
Unreviewed
CVE-2023-6117
was published
Nov 22, 2023
User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4...
Moderate
Unreviewed
CVE-2023-0382
was published
Apr 5, 2023
rustix's `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion
Moderate
CVE-2024-43806
was published
for
rustix
(Rust)
Oct 18, 2023
Denial of service condition in M-Files Server in versions before 24.2 (excluding 23.2 SR7 and 23...
Moderate
Unreviewed
CVE-2024-0563
was published
Feb 23, 2024
Mattermost Plugin Channel Export excessive resource consumption
Moderate
CVE-2024-43105
was published
for
github.com/mattermost/mattermost-plugin-channel-export
(Go)
Aug 23, 2024
An issue was discovered in GitLab CE/EE affecting all versions starting from 11.10 prior to 17.0...
Moderate
Unreviewed
CVE-2024-3114
was published
Aug 8, 2024
ReDoS flaw in RefMatcher when matching branch names using wildcards in GitLab EE/CE affecting all...
Moderate
Unreviewed
CVE-2024-2800
was published
Aug 8, 2024
ProTip!
Advisories are also available from the
GraphQL API