Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,273
Erlang
31
GitHub Actions
21
Go
2,055
Maven
5,000+
npm
3,739
NuGet
668
pip
3,417
Pub
12
RubyGems
891
Rust
872
Swift
36
Unreviewed advisories
All unreviewed
5,000+

62 advisories

Loading
RuoYi Uncontrolled Resource Consumption vulnerability Low
CVE-2023-3163 was published for com.ruoyi:ruoyi (Maven) Jun 8, 2023
Denial of Service Vulnerability in Rack Content-Disposition parsing Low
CVE-2022-44571 was published for rack (RubyGems) Jan 18, 2023
ReDoS based DoS vulnerability in Action Dispatch Low
CVE-2023-22792 was published for actionpack (RubyGems) Jan 18, 2023
robertoz-01 postmodern
Denial of service via multipart parsing in Rack Low
CVE-2022-44572 was published for rack (RubyGems) Jan 18, 2023
EnumStringValues vulnerable to Uncontrolled Resource Consumption Low
CVE-2020-36620 was published for EnumStringValues (NuGet) Dec 21, 2022
hutool-json vulnerable to memory exhaustion Low
CVE-2022-45689 was published for cn.hutool:hutool-json (Maven) Dec 13, 2022
Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing... Low Unreviewed
CVE-2022-33747 was published Oct 11, 2022
Trend Micro Antivirus for Mac 2021 (Consumer) is vulnerable to a memory exhaustion vulnerability... Low Unreviewed
CVE-2021-25227 was published May 24, 2022
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python... Low Unreviewed
CVE-2021-3737 was published May 24, 2022
There is a resource management errors vulnerability in Huawei P30. Local attackers construct... Low Unreviewed
CVE-2020-9203 was published May 24, 2022
A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could... Low Unreviewed
CVE-2020-3504 was published May 24, 2022
An issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c in the Linux kernel... Low Unreviewed
CVE-2020-12655 was published May 24, 2022
A potential DoS flaw was found in the virtio-fs shared file system daemon (virtiofsd)... Low Unreviewed
CVE-2020-10717 was published May 24, 2022
ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is... Low Unreviewed
CVE-2020-6867 was published May 24, 2022
NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource... Low Unreviewed
CVE-2020-5961 was published May 24, 2022
kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with... Low Unreviewed
CVE-2019-19922 was published May 24, 2022
Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial... Low Unreviewed
CVE-2019-13232 was published May 24, 2022
Plone Denial of Service vulnerability via decompressing large zip archives Low
CVE-2013-4199 was published for plone (pip) May 17, 2022
Puppet Denial of Service and Arbitrary File Write Low
CVE-2012-1987 was published for puppet (RubyGems) May 14, 2022
JBossWS vulnerable to uncontrolled recursion Low
CVE-2011-1483 was published for org.jboss.ws:jbossws-common (Maven) May 13, 2022
The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without... Low Unreviewed
CVE-2011-5056 was published May 13, 2022
Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a... Low Unreviewed
CVE-2002-1876 was published Apr 30, 2022
Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a... Low Unreviewed
CVE-2001-0666 was published Apr 30, 2022
Infinite loop in Pillow Low
GHSA-4fx9-vc88-q2xc was published for Pillow (pip) Mar 11, 2022
Regular Expression Denial of Service (ReDoS) in braces Low
CVE-2018-1109 was published for braces (npm) Jan 6, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database