Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,744
Maven
5,000+
npm
4,341
NuGet
765
pip
4,113
Pub
12
RubyGems
960
Rust
1,069
Swift
45
Unreviewed advisories
All unreviewed
5,000+

67 advisories

Loading
robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation Moderate
CVE-2025-66578 was published for robrichards/xmlseclibs (Composer) Dec 8, 2025
d0ge
Credited to d0ge
In Modem, there is a possible system crash due to an uncaught exception. This could lead to... Moderate Unreviewed
CVE-2025-20758 was published Dec 2, 2025
In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to... Moderate Unreviewed
CVE-2025-20754 was published Dec 2, 2025
In Modem, there is a possible system crash due to an uncaught exception. This could lead to... Moderate Unreviewed
CVE-2025-20753 was published Dec 2, 2025
On affected platforms running Arista EOS, certain serial console input might result in an... Moderate Unreviewed
CVE-2025-8870 was published Nov 14, 2025
An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers... Moderate Unreviewed
CVE-2025-59462 was published Oct 27, 2025
Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged... Moderate Unreviewed
CVE-2025-48430 was published Oct 23, 2025
Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally. Moderate Unreviewed
CVE-2025-59229 was published Oct 14, 2025
CISA Thorium uses '.unwrap()' to handle errors related to account verification email messages. An... Moderate Unreviewed
CVE-2025-35436 was published Sep 17, 2025
TYPO3 Bookmark Toolbar vulnerable to denial of service Moderate
CVE-2025-59014 was published for typo3/cms-backend (Composer) Sep 9, 2025
Uncaught exception issue exists in Multiple products in bizhub series. If a malformed file is... Moderate Unreviewed
CVE-2025-54777 was published Aug 29, 2025
Deserialization vulnerability in the IPC module Impact: Successful exploitation of this... Moderate Unreviewed
CVE-2025-48907 was published Jun 6, 2025
vLLM allows clients to crash the openai server with invalid regex Moderate
CVE-2025-48943 was published for vllm (pip) May 28, 2025
g-eoj russellb
Jason-CKY
Credited to g-eoj, russellb, and Jason-CKY
vLLM DOS: Remotely kill vllm over http with invalid JSON schema Moderate
CVE-2025-48942 was published for vllm (pip) May 28, 2025
derekhiggins Jason-CKY
russellb
Credited to derekhiggins, Jason-CKY, and russellb
Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an... Moderate Unreviewed
CVE-2025-20054 was published May 13, 2025
IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the... Moderate Unreviewed
CVE-2024-52903 was published May 2, 2025
A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote,... Moderate Unreviewed
CVE-2025-3891 was published Apr 29, 2025
The vulnerability allows any authenticated user to cause the PeerTube server to stop functioning... Moderate Unreviewed
CVE-2025-32944 was published Apr 15, 2025
Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to client-side Denial of... Moderate Unreviewed
CVE-2024-49705 was published Apr 14, 2025
An unhandled exception in the danny-avila/librechat repository, version git 600d217, can cause... Moderate Unreviewed
CVE-2024-11173 was published Mar 20, 2025
With a specially crafted Python script, an attacker could send continuous startMeasurement... Moderate Unreviewed
CVE-2025-24836 was published Feb 14, 2025
Uncaught exception in OpenBMC Firmware for the Intel(R) Server M50FCP Family and Intel(R) Server... Moderate Unreviewed
CVE-2025-20097 was published Feb 13, 2025
Specifically crafted payloads sent to the RFID reader could cause DoS of RFID reader. After the... Moderate Unreviewed
CVE-2024-13417 was published Feb 6, 2025
IBM EntireX 11.1 could allow a local user to cause a denial of service due to an unhandled error... Moderate Unreviewed
CVE-2025-0158 was published Feb 6, 2025
Denial of service in DNS-over-QUIC in Technitium DNS Server <= v13.2.2 allows remote attackers to... Moderate Unreviewed
CVE-2024-56946 was published Feb 3, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database