GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
                  
                    
                      
                      All reviewed
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      Composer
                    
                    
                      4,963
                    
                  
                  
                    
                      
                      Erlang
                    
                    
                      39
                    
                  
                  
                    
                      
                      GitHub Actions
                    
                    
                      38
                    
                  
                  
                    
                      
                      Go
                    
                    
                      2,614
                    
                  
                  
                    
                      
                      Maven
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      npm
                    
                    
                      4,254
                    
                  
                  
                    
                      
                      NuGet
                    
                    
                      760
                    
                  
                  
                    
                      
                      pip
                    
                    
                      4,031
                    
                  
                  
                    
                      
                      Pub
                    
                    
                      12
                    
                  
                  
                    
                      
                      RubyGems
                    
                    
                      953
                    
                  
                  
                    
                      
                      Rust
                    
                    
                      1,049
                    
                  
                  
                    
                      
                      Swift
                    
                    
                      45
                    
                  
                  Unreviewed advisories
                  
                    
                      
                      All unreviewed
                    
                    
                      5,000+
                    
                  
            Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
      428 advisories
        Filter by severity
        
      
      
    
                    
                      GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.0 before 18.3.5, 18...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-11447
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.3.5,...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-10497
                      
                      was published
                      Oct 27, 2025 
                    
                  
                    
                      A flaw was found in Undertow. When an AJP request is sent that exceeds the max-header-size...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2023-5379
                      
                      was published
                      Dec 13, 2023 
                    
                  
                    
                      Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2020-3569
                      
                      was published
                      May 24, 2022 
                    
                  
                    
                      A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2020-3566
                      
                      was published
                      May 24, 2022 
                    
                  
                    
                      A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-56223
                      
                      was published
                      Oct 20, 2025 
                    
                  
                    
                      A vulnerability in danswer-ai/danswer version 0.9.0 allows for denial of service through memory...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-0182
                      
                      was published
                      Mar 20, 2025 
                    
                  
                    
                      SuperAGI version v0.0.14 is vulnerable to an unauthenticated Denial of Service (DoS) attack. The...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-9437
                      
                      was published
                      Mar 20, 2025 
                    
                  
                    
                      A vulnerability in parisneo/lollms-webui v13 arises from the server's handling of multipart...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-1451
                      
                      was published
                      Mar 20, 2025 
                    
                  
                    
                      A vulnerability in danswer-ai/danswer v0.3.94 allows an attacker to cause a Denial of Service ...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-8028
                      
                      was published
                      Mar 20, 2025 
                    
                  
                    
                      A vulnerability in imartinez/privategpt version 0.5.0 allows for a Denial of Service (DOS) attack...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-8018
                      
                      was published
                      Mar 20, 2025 
                    
                  
                    
                      In danny-avila/librechat version git 0c2a583, there is an improper input validation vulnerability...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-11171
                      
                      was published
                      Mar 20, 2025 
                    
                  
                    
                      automatic1111/stable-diffusion-webui version 1.10.0 contains a vulnerability where the server...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-10935
                      
                      was published
                      Mar 20, 2025 
                    
                  
                    
                      Realchar version v0.0.4 is vulnerable to an unauthenticated denial of service (DoS) attack. The...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-10051
                      
                      was published
                      Mar 20, 2025 
                    
                  
                    
                      A vulnerability in haotian-liu/llava v1.2.0 allows an attacker to cause a Denial of Service (DoS)...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-10225
                      
                      was published
                      Mar 20, 2025 
                    
                  
                    
                      A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-6037
                      
                      was published
                      Jul 11, 2024 
                    
                  
                    
                      When the Allowed IP Addresses feature is configured on the F5OS-C partition control plane,...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-59778
                      
                      was published
                      Oct 15, 2025 
                    
                  
                    
                      When BIG-IP SSL Orchestrator is enabled, undisclosed traffic can cause the Traffic Management...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-41430
                      
                      was published
                      Oct 15, 2025 
                    
                  
                    
                      When a BIG-IP APM Access Policy is configured on a virtual server, undisclosed traffic can cause...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-53521
                      
                      was published
                      Oct 15, 2025 
                    
                  
                    
                      When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-46706
                      
                      was published
                      Oct 15, 2025 
                    
                  
                    
                      On BIG-IP Next CNF, BIG-IP Next SPK, and BIG-IP Next for Kubernetes systems, repeated undisclosed...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-55670
                      
                      was published
                      Oct 15, 2025 
                    
                  
                    
                      An unauthenticated Denial of Service (DoS) vulnerability was identified in ChuanhuChatGPT version...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-10650
                      
                      was published
                      Mar 20, 2025 
                    
                  
                    
                      A vulnerability in binary-husky/gpt_academic version 3.83 allows an attacker to cause a Denial of...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2024-10714
                      
                      was published
                      Mar 20, 2025 
                    
                  
                    
                      A denial-of-service security issue exists in the affected product and version. The security issue...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-9177
                      
                      was published
                      Oct 14, 2025 
                    
                  
                    
                      GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.12 to 18.2.8, 18.3...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-10004
                      
                      was published
                      Oct 9, 2025 
                    
                  
        
        ProTip!
        Advisories are also available from the 
        GraphQL API