GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,750
Erlang
35
GitHub Actions
29
Go
2,323
Maven
5,000+
npm
3,956
NuGet
712
pip
3,739
Pub
12
RubyGems
921
Rust
973
Swift
38
Unreviewed advisories
All unreviewed
5,000+
1,438 advisories
Filter by severity
DB-GPT Uncontrolled Resource Consumption vulnerability
High
CVE-2024-10829
was published
for
dbgpt
(pip)
Mar 20, 2025
Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
High
CVE-2024-10624
was published
for
gradio
(pip)
Mar 20, 2025
H2O Vulnerable to Denial of Service (DoS) and File Write
High
CVE-2024-10572
was published
for
ai.h2o:h2o-ext-xgboost
(Maven)
Mar 20, 2025
H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint
High
CVE-2024-10549
was published
for
ai.h2o:h2o-core
(Maven)
Mar 20, 2025
An unauthenticated Denial of Service (DoS) vulnerability was identified in ChuanhuChatGPT version...
High
Unreviewed
CVE-2024-10650
was published
Mar 20, 2025
A vulnerability in binary-husky/gpt_academic version 3.83 allows an attacker to cause a Denial of...
High
Unreviewed
CVE-2024-10714
was published
Mar 20, 2025
Aim Vulnerable to Denial of Service (DoS)
High
CVE-2024-10110
was published
for
aim
(pip)
Mar 20, 2025
LiteLLM Vulnerable to Denial of Service (DoS)
High
CVE-2024-10188
was published
for
litellm
(pip)
Mar 20, 2025
Realchar version v0.0.4 is vulnerable to an unauthenticated denial of service (DoS) attack. The...
High
Unreviewed
CVE-2024-10051
was published
Mar 20, 2025
A vulnerability in haotian-liu/llava v1.2.0 allows an attacker to cause a Denial of Service (DoS)...
High
Unreviewed
CVE-2024-10225
was published
Mar 20, 2025
jsPDF Bypass Regular Expression Denial of Service (ReDoS)
High
CVE-2025-29907
was published
for
jspdf
(npm)
Mar 18, 2025
PostQuantum-Feldman-VSS'S Dependency Vulnerability in gmpy2 Leading to Interpreter Crash
High
GHSA-v432-7f47-9g94
was published
for
PostQuantum-Feldman-VSS
(pip)
Mar 17, 2025
A Denial of Service (DoS) vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS...
High
Unreviewed
CVE-2025-0114
was published
Mar 12, 2025
Ruby SAML allows remote Denial of Service (DoS) with compressed SAML responses
High
CVE-2025-25293
was published
for
ruby-saml
(RubyGems)
Mar 12, 2025
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15....
High
Unreviewed
CVE-2024-54546
was published
Mar 10, 2025
The issue was addressed with improved memory handling. This issue is fixed in iOS 18 and iPadOS...
High
Unreviewed
CVE-2024-44227
was published
Mar 10, 2025
Sysax Multi Server 6.99 is vulnerable to a denial of service (DoS) condition when processing...
High
Unreviewed
CVE-2024-53458
was published
Mar 5, 2025
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923...
High
Unreviewed
CVE-2025-27669
was published
Mar 5, 2025
Goroutine Leak in Abacus SSE Implementation
High
CVE-2025-27421
was published
for
github.com/jasonlovesdoggo/abacus
(Go)
Mar 3, 2025
A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers...
High
Unreviewed
CVE-2023-51314
was published
Feb 20, 2025
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1...
High
Unreviewed
CVE-2023-51316
was published
Feb 20, 2025
A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event...
High
Unreviewed
CVE-2023-51293
was published
Feb 19, 2025
A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking...
High
Unreviewed
CVE-2023-51301
was published
Feb 19, 2025
Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB....
High
Unreviewed
CVE-2023-34397
was published
Feb 14, 2025
An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a...
High
Unreviewed
CVE-2024-56940
was published
Feb 13, 2025
ProTip!
Advisories are also available from the
GraphQL API