Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
46
GitHub Actions
47
Go
3,340
Maven
5,000+
npm
5,000+
NuGet
881
pip
4,549
Pub
12
RubyGems
1,012
Rust
1,202
Swift
51
Unreviewed advisories
All unreviewed
5,000+

1,561 advisories

Loading
jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions High
CVE-2026-25535 was published for jspdf (npm) Feb 19, 2026
ZeroXJacks Credited to ZeroXJacks
XMedia Recode 3.4.8.6 contains a denial of service vulnerability that allows attackers to crash... Moderate Unreviewed
CVE-2019-25350 was published Feb 19, 2026
pypdf possibly has long runtimes for malformed FlateDecode streams Moderate
CVE-2026-27026 was published for pypdf (pip) Feb 18, 2026
CheonWoong-Park Credited to CheonWoong-Park and stefan6419846 stefan6419846 stefan6419846
Go Ethereum affected by DoS via malicious p2p message Moderate
CVE-2026-26313 was published for github.com/ethereum/go-ethereum (Go) Feb 18, 2026
revofusion Credited to revofusion
A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can... Moderate Unreviewed
CVE-2025-14876 was published Feb 18, 2026
OpenClaw affected by denial of service through unguarded archive extraction allowing high expansion/resource abuse (ZIP/TAR) Moderate
CVE-2026-28452 was published for clawdbot (npm) Feb 18, 2026
vincentkoc Credited to vincentkoc
OpenClaw: denial of service through large base64 media files allocating large buffers before limit checks Moderate
CVE-2026-29612 was published for clawdbot (npm) Feb 18, 2026
vincentkoc Credited to vincentkoc
sqlparse: formatting list of tuples leads to denial of service Moderate
GHSA-27jp-wm6q-gp25 was published for sqlparse (pip) Feb 13, 2026
jacobtylerwalls Credited to jacobtylerwalls
Centova Cast 3.2.12 contains a denial of service vulnerability that allows attackers to overwhelm... High Unreviewed
CVE-2019-25342 was published Feb 13, 2026
webtransport-go: Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule Moderate
CVE-2026-21434 was published for github.com/quic-go/webtransport-go (Go) Feb 12, 2026
This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26... Moderate Unreviewed
CVE-2026-20608 was published Feb 12, 2026
An allocation of resources without limits or throttling vulnerability has been reported to affect... Low Unreviewed
CVE-2025-58471 was published Feb 11, 2026
An allocation of resources without limits or throttling vulnerability has been reported to affect... Low Unreviewed
CVE-2025-57711 was published Feb 11, 2026
An allocation of resources without limits or throttling vulnerability has been reported to affect... Low Unreviewed
CVE-2025-54155 was published Feb 11, 2026
An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If... Moderate Unreviewed
CVE-2025-54149 was published Feb 11, 2026
An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If... Moderate Unreviewed
CVE-2025-54151 was published Feb 11, 2026
An allocation of resources without limits or throttling vulnerability has been reported to affect... Low Unreviewed
CVE-2025-57710 was published Feb 11, 2026
An allocation of resources without limits or throttling vulnerability has been reported to affect... Low Unreviewed
CVE-2025-54161 was published Feb 11, 2026
An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If... Moderate Unreviewed
CVE-2025-54150 was published Feb 11, 2026
An allocation of resources without limits or throttling vulnerability has been reported to affect... Low Unreviewed
CVE-2025-57708 was published Feb 11, 2026
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.8 before 18.6.6, 18... High Unreviewed
CVE-2025-8099 was published Feb 11, 2026
GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 18.6.6, 18.7... Moderate Unreviewed
CVE-2026-1387 was published Feb 11, 2026
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.0 before 18.6.6, 18... Moderate Unreviewed
CVE-2026-1458 was published Feb 11, 2026
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.7.4,... Moderate Unreviewed
CVE-2026-1456 was published Feb 11, 2026
Improper system call parameter validation in the Trusted OS may allow a malicious driver to... High Unreviewed
CVE-2021-26381 was published Feb 10, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database