GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,676
Erlang
34
GitHub Actions
26
Go
2,265
Maven
5,000+
npm
3,917
NuGet
705
pip
3,686
Pub
12
RubyGems
916
Rust
943
Swift
38
Unreviewed advisories
All unreviewed
5,000+
595 advisories
Filter by severity
Infinite loop condition in Amazon.IonDotnet
High
CVE-2025-3857
was published
for
Amazon.IonDotnet
(NuGet)
Apr 21, 2025
This vulnerability allows any attacker to cause the PeerTube server to stop responding to...
High
Unreviewed
CVE-2025-32947
was published
Apr 15, 2025
SurrealDB CPU exhaustion via custom functions result in total DoS
High
GHSA-pxw4-94j3-v9pf
was published
for
surrealdb
(Rust)
Apr 11, 2025
ts-asn1-der has Incorrect DER Encoding of Numbers Leading to Denial of Service and Incorrect Value Representation
Moderate
CVE-2025-32029
was published
for
@apeleghq/asn1-der
(npm)
Apr 7, 2025
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Fix ib block...
Moderate
Unreviewed
CVE-2023-53026
was published
Mar 27, 2025
Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This...
Moderate
Unreviewed
CVE-2025-2838
was published
Mar 27, 2025
In Azle, calling `setTimer` causes infinite loop of timers
High
CVE-2025-29776
was published
for
azle
(npm)
Mar 14, 2025
In the Linux kernel, the following vulnerability has been resolved:
f2fs: avoid infinite loop to...
Moderate
Unreviewed
CVE-2022-49317
was published
Mar 14, 2025
In the Linux kernel, the following vulnerability has been resolved:
nvmet: Fix crash when a...
Moderate
Unreviewed
CVE-2025-21850
was published
Mar 12, 2025
OpenDJ Denial of Service (DoS) using alias loop
High
CVE-2025-27497
was published
for
org.openidentityplatform.opendj:opendj-server-legacy
(Maven)
Mar 5, 2025
In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests...
Moderate
Unreviewed
CVE-2025-1695
was published
Mar 4, 2025
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Arm Ltd Bifrost GPU...
Moderate
Unreviewed
CVE-2024-6790
was published
Feb 3, 2025
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: fix lockup on...
Moderate
Unreviewed
CVE-2025-21681
was published
Jan 31, 2025
In the Linux kernel, the following vulnerability has been resolved:
iomap: avoid avoid...
Moderate
Unreviewed
CVE-2025-21667
was published
Jan 31, 2025
In the Linux kernel, the following vulnerability has been resolved:
filemap: avoid truncating 64...
Moderate
Unreviewed
CVE-2025-21665
was published
Jan 31, 2025
In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input...
High
Unreviewed
CVE-2024-40675
was published
Jan 28, 2025
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to...
Moderate
Unreviewed
CVE-2025-0290
was published
Jan 28, 2025
Infinite loop and Blind SSRF found inside the Webfinger mechanism in @fedify/fedify
Moderate
CVE-2025-23221
was published
for
@fedify/fedify
(npm)
Jan 21, 2025
In the Linux kernel, the following vulnerability has been resolved:
exfat: fix the infinite loop...
Moderate
Unreviewed
CVE-2024-57940
was published
Jan 21, 2025
Predictable results in nanoid generation when given non-integer values
Moderate
CVE-2024-55565
was published
for
nanoid
(npm)
Dec 9, 2024
Drupal core Denial of Service
High
CVE-2024-11941
was published
for
drupal/core
(Composer)
Dec 5, 2024
7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote...
Moderate
Unreviewed
CVE-2024-11612
was published
Nov 22, 2024
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: fix 6...
Moderate
Unreviewed
CVE-2024-53055
was published
Nov 19, 2024
In the Linux kernel, the following vulnerability has been resolved:
filemap: Fix bounds checking...
Moderate
Unreviewed
CVE-2024-50272
was published
Nov 19, 2024
In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible...
High
Unreviewed
CVE-2017-13313
was published
Nov 16, 2024
ProTip!
Advisories are also available from the
GraphQL API