Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,732
Erlang
35
GitHub Actions
29
Go
2,310
Maven
5,000+
npm
3,949
NuGet
711
pip
3,728
Pub
12
RubyGems
920
Rust
964
Swift
38
Unreviewed advisories
All unreviewed
5,000+

598 advisories

Loading
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - fix... Moderate Unreviewed
CVE-2022-48630 was published Mar 5, 2024
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Arm Ltd Bifrost GPU... Moderate Unreviewed
CVE-2024-6790 was published Feb 3, 2025
In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64... Moderate Unreviewed
CVE-2025-21665 was published Jan 31, 2025
In the Linux kernel, the following vulnerability has been resolved: iomap: avoid avoid... Moderate Unreviewed
CVE-2025-21667 was published Jan 31, 2025
In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input... High Unreviewed
CVE-2024-40675 was published Jan 28, 2025
When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be... Moderate Unreviewed
CVE-2023-0437 was published Jan 12, 2024
EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown... High Unreviewed
CVE-2023-45232 was published Jan 16, 2024
EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option... High Unreviewed
CVE-2023-45233 was published Jan 16, 2024
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file Moderate
CVE-2024-25710 was published for org.apache.commons:commons-compress (Maven) Feb 19, 2024
oscerd anonymous-nlp-student
In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests... Moderate Unreviewed
CVE-2025-1695 was published Mar 4, 2025
OpenDJ Denial of Service (DoS) using alias loop High
CVE-2025-27497 was published for org.openidentityplatform.opendj:opendj-server-legacy (Maven) Mar 5, 2025
hannes96
phpseclib Infinite Loop vulnerability High
CVE-2023-27560 was published for phpseclib/phpseclib (Composer) Mar 3, 2023
janedbal
A vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All... High Unreviewed
CVE-2021-25663 was published May 24, 2022
A vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All... High Unreviewed
CVE-2021-25664 was published May 24, 2022
In the Linux kernel, the following vulnerability has been resolved: nvmet: Fix crash when a... Moderate Unreviewed
CVE-2025-21850 was published Mar 12, 2025
In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix a crash if -... Moderate Unreviewed
CVE-2021-47159 was published Mar 25, 2024
In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid infinite loop to... Moderate Unreviewed
CVE-2022-49317 was published Mar 14, 2025
In Azle, calling `setTimer` causes infinite loop of timers High
CVE-2025-29776 was published for azle (npm) Mar 14, 2025
Improper Handling of Exceptional Conditions vulnerability in Daurnimator HTTP Library for Lua... High Unreviewed
CVE-2023-4540 was published Sep 5, 2023
HAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote... High Unreviewed
CVE-2024-45506 was published Sep 4, 2024
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Synchronize... Moderate Unreviewed
CVE-2023-52635 was published Apr 2, 2024
In the Linux kernel, the following vulnerability has been resolved: netdevsim: avoid potential... Moderate Unreviewed
CVE-2024-26681 was published Apr 2, 2024
In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix task hung while... Moderate Unreviewed
CVE-2024-26780 was published Apr 4, 2024
Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This... Moderate Unreviewed
CVE-2025-2838 was published Mar 27, 2025
In the Linux kernel, the following vulnerability has been resolved: ext4: add error checking to... Moderate Unreviewed
CVE-2021-47406 was published May 21, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database