Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,450
Maven
5,000+
npm
5,000+
NuGet
1,090
pip
5,000+
Pub
13
RubyGems
1,134
Rust
1,509
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

62 advisories

Loading
Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component:... Low Unreviewed
CVE-2026-60936 was published Jul 22, 2026
Vulnerability in the Oracle Inventory Optimization product of Oracle E-Business Suite (component:... Low Unreviewed
CVE-2026-61048 was published Jul 22, 2026
Vulnerability in the GoldenGate Stream Analytics product of Oracle GoldenGate (component:... Low Unreviewed
CVE-2026-47022 was published Jul 22, 2026
Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component:... Low Unreviewed
CVE-2026-62508 was published Jul 22, 2026
A flaw has been found in HdrHistogram up to 2.2.2. This affects the function org.HdrHistogram... Low Unreviewed
CVE-2026-14684 was published Jul 5, 2026
A vulnerability was detected in HdrHistogram up to 2.2.2. Affected by this issue is the function... Low Unreviewed
CVE-2026-14683 was published Jul 5, 2026
A flaw has been found in kokke tiny-regex-c up to f2632c6d9ed25272987471cdb8b70395c2460bdb. This... Low Unreviewed
CVE-2026-11478 was published Jun 8, 2026
A flaw has been found in dask up to 3.0. Affected by this issue is the function nunique_approx of... Low Unreviewed
CVE-2026-10705 was published Jun 3, 2026
A vulnerability was determined in Open5GS up to 2.7.7. This affects the function handle_amf_info... Low Unreviewed
CVE-2026-10156 was published May 31, 2026
A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function... Low Unreviewed
CVE-2026-8124 was published May 8, 2026
An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of... Low Unreviewed
CVE-2026-31051 was published Apr 24, 2026
A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability... Low Unreviewed
CVE-2026-0992 was published Jan 15, 2026
Tanium addressed an uncontrolled resource consumption vulnerability in Interact. Low Unreviewed
CVE-2026-6416 was published Apr 22, 2026
ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource... Low Unreviewed
CVE-2026-27308 was published Apr 15, 2026
ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource... Low Unreviewed
CVE-2026-27307 was published Apr 15, 2026
The Premium Addons for Elementor plugin for WordPress is vulnerable to Regular Expression Denial... Low Unreviewed
CVE-2024-6434 was published Jul 4, 2024
HCL AION is affected by a vulnerability related to the handling of upload size limits. Improper... Low Unreviewed
CVE-2025-52636 was published Mar 16, 2026
When loading a plist file, the plistlib module reads data in size specified by the file itself,... Low Unreviewed
CVE-2025-13837 was published Dec 1, 2025
An uncontrolled resource consumption vulnerability has been reported to affect File Station 5. If... Low Unreviewed
CVE-2025-62854 was published Feb 11, 2026
An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26... Low Unreviewed
CVE-2025-66861 was published Dec 29, 2025
A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background... Low Unreviewed
CVE-2023-5870 was published Dec 10, 2023
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services... Low Unreviewed
CVE-2024-21232 was published Oct 15, 2024
Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). ... Low Unreviewed
CVE-2024-21231 was published Oct 15, 2024
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python... Low Unreviewed
CVE-2021-3737 was published May 24, 2022
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). ... Low Unreviewed
CVE-2025-30681 was published Apr 15, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database