Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,247
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

266 advisories

Loading
In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite... Moderate Unreviewed
CVE-2024-46701 was published Sep 13, 2024
In the Linux kernel, the following vulnerability has been resolved: ext4: fix infinite loop when... Moderate Unreviewed
CVE-2024-43828 was published Aug 17, 2024
In the Linux kernel, the following vulnerability has been resolved: net, sunrpc: Remap EPERM in... Moderate Unreviewed
CVE-2024-42246 was published Aug 7, 2024
In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in ... Moderate Unreviewed
CVE-2024-42240 was published Aug 7, 2024
In the Linux kernel, the following vulnerability has been resolved: can: mcp251xfd: fix infinite... Moderate Unreviewed
CVE-2024-41088 was published Jul 29, 2024
In the Linux kernel, the following vulnerability has been resolved: vhost: fix hung thread due... Moderate Unreviewed
CVE-2022-48862 was published Jul 16, 2024
In the Linux kernel, the following vulnerability has been resolved: iavf: Fix hang during reboot... Moderate Unreviewed
CVE-2022-48840 was published Jul 16, 2024
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: fix... Moderate Unreviewed
CVE-2024-40995 was published Jul 12, 2024
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions... Moderate Unreviewed
CVE-2024-36990 was published Jul 1, 2024
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix loop termination... Moderate Unreviewed
CVE-2024-36288 was published Jun 21, 2024
In the Linux kernel, the following vulnerability has been resolved: PCI: pciehp: Fix infinite... Moderate Unreviewed
CVE-2021-47617 was published Jun 20, 2024
Deep Sea Electronics DSE855 Multipart Boundary Infinite Loop Denial-of-Service Vulnerability.... Moderate Unreviewed
CVE-2024-5949 was published Jun 13, 2024
A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions <... Moderate Unreviewed
CVE-2023-50763 was published Jun 11, 2024
In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid infinite... Moderate Unreviewed
CVE-2024-35982 was published May 20, 2024
MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3... Moderate Unreviewed
CVE-2024-4854 was published May 14, 2024
Bouncy Castle crafted signature and public key can be used to trigger an infinite loop Moderate
CVE-2024-30172 was published for BouncyCastle (Maven) May 14, 2024
levpachmanov
Vitess vulnerable to infinite memory consumption and vtgate crash Moderate
CVE-2024-32886 was published for github.com/vitessio/vitess (Go) May 8, 2024
dbussink mattrobenolt
vmg
Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the... Moderate Unreviewed
CVE-2023-52726 was published Apr 30, 2024
In the Linux kernel, the following vulnerability has been resolved: fsdax: Fix infinite loop in... Moderate Unreviewed
CVE-2022-48635 was published Apr 28, 2024
Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite... Moderate Unreviewed
CVE-2024-2397 was published Apr 12, 2024
Windows Hyper-V Denial of Service Vulnerability Moderate Unreviewed
CVE-2024-21408 was published Mar 12, 2024
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON Moderate
CVE-2024-24786 was published for google.golang.org/protobuf (Go) Mar 6, 2024
oscerd chancez
In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Stop relying on... Moderate Unreviewed
CVE-2024-26603 was published Feb 26, 2024
When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be... Moderate Unreviewed
CVE-2023-0437 was published Jan 12, 2024
MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop... Moderate Unreviewed
CVE-2023-50120 was published Jan 10, 2024
ProTip! Advisories are also available from the GraphQL API