Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
40
Go
2,974
Maven
5,000+
npm
4,621
NuGet
788
pip
4,317
Pub
12
RubyGems
984
Rust
1,131
Swift
49
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,054 advisories

Loading
A denial-of-service issue was addressed with improved validation. This issue is fixed in watchOS... High Unreviewed
CVE-2026-20650 was published Feb 12, 2026
An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a... High Unreviewed
CVE-2025-70886 was published Feb 12, 2026
The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3,... High Unreviewed
CVE-2026-20652 was published Feb 12, 2026
A path traversal in Moo Chan Song v4.5.7 allows attackers to cause a Denial of Service (DoS) via... High Unreviewed
CVE-2025-69620 was published Feb 4, 2026
Water-Melon Melon commit 9df9292 and below is vulnerable to Denial of Service. The HTTP component... High Unreviewed
CVE-2025-71031 was published Feb 4, 2026
An issue was discovered in Samsung Modem Exynos through 2025-08-29. Incorrect handling of NAS... High Unreviewed
CVE-2025-59439 was published Feb 3, 2026
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition.... High Unreviewed
CVE-2025-9465 was published Jan 20, 2026
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition.... High Unreviewed
CVE-2025-9278 was published Jan 20, 2026
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition.... High Unreviewed
CVE-2025-9464 was published Jan 20, 2026
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition.... High Unreviewed
CVE-2025-9466 was published Jan 20, 2026
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition.... High Unreviewed
CVE-2025-9283 was published Jan 20, 2026
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition.... High Unreviewed
CVE-2025-9282 was published Jan 20, 2026
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition.... High Unreviewed
CVE-2025-9279 was published Jan 20, 2026
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition.... High Unreviewed
CVE-2025-9281 was published Jan 20, 2026
A security issue exists within ArmorStart® LT that can result in a denial-of-service condition.... High Unreviewed
CVE-2025-9280 was published Jan 20, 2026
A dimension validation flaw in the flow.empty() component of OneFlow 0.9.0 allows attackers to... High Unreviewed
CVE-2025-65888 was published Jan 28, 2026
A GPU device-ID validation flaw in OneFlow v0.9.0 allows attackers to trigger a Denial of Dervice... High Unreviewed
CVE-2025-65891 was published Jan 28, 2026
A device-ID validation flaw in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS)... High Unreviewed
CVE-2025-65890 was published Jan 28, 2026
An issue in the flow.cuda.BoolTensor component of OneFlow v0.9.0 allows attackers to cause a... High Unreviewed
CVE-2025-71000 was published Jan 28, 2026
A type validation flaw in the flow.dstack() component of OneFlow v0.9.0 allows attackers to cause... High Unreviewed
CVE-2025-65889 was published Jan 28, 2026
A GPU device-ID validation flaw in the flow.cuda.get_device_capability() component of OneFlow v0... High Unreviewed
CVE-2025-70999 was published Jan 28, 2026
A shape mismatch vulnerability in OneFlow v0.9.0 allows attackers to cause a Denial of Service ... High Unreviewed
CVE-2025-65886 was published Jan 28, 2026
Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the... High Unreviewed
CVE-2026-21720 was published Jan 27, 2026
A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to... High Unreviewed
CVE-2025-59465 was published Jan 20, 2026
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... High Unreviewed
CVE-2026-21945 was published Jan 21, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database