Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,700
Maven
5,000+
npm
4,328
NuGet
761
pip
4,100
Pub
12
RubyGems
958
Rust
1,064
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

40 advisories

Loading
A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker... High Unreviewed
CVE-2024-11172 was published Mar 20, 2025
A denial-of-service security issue in the affected product. The security issue stems from a fault... High Unreviewed
CVE-2025-9124 was published Oct 14, 2025
A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A... High Unreviewed
CVE-2013-10065 was published Aug 5, 2025
A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a... High Unreviewed
CVE-2025-55553 was published Sep 25, 2025
A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is... High Unreviewed
CVE-2025-55557 was published Sep 25, 2025
AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could... High Unreviewed
CVE-2025-44019 was published Jun 12, 2025
AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could... High Unreviewed
CVE-2025-36539 was published Jun 12, 2025
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user... High Unreviewed
CVE-2025-23166 was published May 19, 2025
In F?Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022... High Unreviewed
CVE-2022-38166 was published Nov 25, 2022
Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting... High Unreviewed
CVE-2016-10363 was published May 13, 2022
In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This... High Unreviewed
CVE-2025-20664 was published Apr 7, 2025
In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This... High Unreviewed
CVE-2025-20663 was published Apr 7, 2025
Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact:... High Unreviewed
CVE-2024-58111 was published Apr 7, 2025
Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact:... High Unreviewed
CVE-2024-58112 was published Apr 7, 2025
NLnet Labs Krill supports direct access to the RRDP repository content through its built-in web... High Unreviewed
CVE-2023-0158 was published Jan 17, 2023
Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command... High Unreviewed
CVE-2025-3083 was published Apr 1, 2025
A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow... High Unreviewed
CVE-2025-20176 was published Feb 5, 2025
mintplex-labs/anything-llm version git 6dc3642 contains an unauthenticated Denial of Service (DoS... High Unreviewed
CVE-2024-8249 was published Mar 20, 2025
In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling.... High Unreviewed
CVE-2023-52342 was published Apr 8, 2024
A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow... High Unreviewed
CVE-2025-20173 was published Feb 5, 2025
A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS... High Unreviewed
CVE-2025-20172 was published Feb 5, 2025
A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow... High Unreviewed
CVE-2025-20171 was published Feb 5, 2025
In network HW, there is a possible system hang due to an uncaught exception. This could lead to... High Unreviewed
CVE-2025-20637 was published Feb 3, 2025
Null pointer dereference vulnerability in the image decoding module Impact: Successful... High Unreviewed
CVE-2024-54106 was published Dec 12, 2024
In wlan driver, there is a possible client disconnection due to improper handling of exceptional... High Unreviewed
CVE-2024-20137 was published Dec 2, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database