GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,701
Maven
5,000+
npm
4,328
NuGet
761
pip
4,103
Pub
12
RubyGems
958
Rust
1,064
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
84 advisories
Filter by severity
In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to...
Moderate
Unreviewed
CVE-2025-20754
was published
Dec 2, 2025
In Modem, there is a possible system crash due to an uncaught exception. This could lead to...
Moderate
Unreviewed
CVE-2025-20753
was published
Dec 2, 2025
In Modem, there is a possible system crash due to an uncaught exception. This could lead to...
Moderate
Unreviewed
CVE-2025-20758
was published
Dec 2, 2025
On affected platforms running Arista EOS, certain serial console input might result in an...
Moderate
Unreviewed
CVE-2025-8870
was published
Nov 14, 2025
Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5;...
Critical
Unreviewed
CVE-2025-12423
was published
Oct 28, 2025
A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to...
Moderate
Unreviewed
CVE-2024-28835
was published
Mar 21, 2024
Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an...
Moderate
Unreviewed
CVE-2025-20054
was published
May 13, 2025
Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to client-side Denial of...
Moderate
Unreviewed
CVE-2024-49705
was published
Apr 14, 2025
An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers...
Moderate
Unreviewed
CVE-2025-59462
was published
Oct 27, 2025
Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged...
Moderate
Unreviewed
CVE-2025-48430
was published
Oct 23, 2025
A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker...
High
Unreviewed
CVE-2024-11172
was published
Mar 20, 2025
Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally.
Moderate
Unreviewed
CVE-2025-59229
was published
Oct 14, 2025
A denial-of-service security issue in the affected product. The security issue stems from a fault...
High
Unreviewed
CVE-2025-9124
was published
Oct 14, 2025
Unexpected server crash in database driver in M-Files Server before 25.1.14445.5 allows a highly...
Moderate
Unreviewed
CVE-2025-0648
was published
Jan 23, 2025
A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A...
High
Unreviewed
CVE-2013-10065
was published
Aug 5, 2025
A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a...
High
Unreviewed
CVE-2025-55553
was published
Sep 25, 2025
A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is...
High
Unreviewed
CVE-2025-55557
was published
Sep 25, 2025
IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the...
Moderate
Unreviewed
CVE-2024-52903
was published
May 2, 2025
CISA Thorium uses '.unwrap()' to handle errors related to account verification email messages. An...
Moderate
Unreviewed
CVE-2025-35436
was published
Sep 17, 2025
Uncaught exception issue exists in Multiple products in bizhub series. If a malformed file is...
Moderate
Unreviewed
CVE-2025-54777
was published
Aug 29, 2025
A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote,...
Moderate
Unreviewed
CVE-2025-3891
was published
Apr 29, 2025
AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if
exploited, could...
High
Unreviewed
CVE-2025-44019
was published
Jun 12, 2025
AVEVA PI Data Archive products
are vulnerable to an uncaught exception that, if exploited, could...
High
Unreviewed
CVE-2025-36539
was published
Jun 12, 2025
Deserialization vulnerability in the IPC module
Impact: Successful exploitation of this...
Moderate
Unreviewed
CVE-2025-48907
was published
Jun 6, 2025
Some WASM source files could have caused a crash when loaded in devtools. This vulnerability...
Moderate
Unreviewed
CVE-2024-0754
was published
Jan 23, 2024
ProTip!
Advisories are also available from the
GraphQL API