Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,992
Erlang
39
GitHub Actions
38
Go
2,634
Maven
5,000+
npm
4,258
NuGet
760
pip
4,051
Pub
12
RubyGems
955
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

3,036 advisories

Loading
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ... Moderate Unreviewed
CVE-2025-50082 was published Jul 15, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported... Moderate Unreviewed
CVE-2025-50078 was published Jul 15, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ... Moderate Unreviewed
CVE-2025-50083 was published Jul 15, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported... Moderate Unreviewed
CVE-2025-50077 was published Jul 15, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported... Moderate Unreviewed
CVE-2025-50088 was published Jul 15, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). ... Moderate Unreviewed
CVE-2025-50080 was published Jul 15, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ... Moderate Unreviewed
CVE-2025-50079 was published Jul 15, 2025
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported... Moderate Unreviewed
CVE-2025-50076 was published Jul 15, 2025
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component:... Low Unreviewed
CVE-2025-30752 was published Jul 15, 2025
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)... Moderate Unreviewed
CVE-2025-30753 was published Jul 15, 2025
Apache CXF is vulnerable to DoS attacks as entire files are read into memory and logged Moderate
CVE-2025-48795 was published for org.apache.cxf:cxf-core (Maven) Jul 15, 2025
pavelarnost
Credited to pavelarnost
resolv vulnerable to DoS via insufficient DNS domain name length validation Moderate
CVE-2025-24294 was published for resolv (RubyGems) Jul 15, 2025
A vulnerability was found in chinese-poetry 0.1. It has been rated as problematic. This issue... Moderate Unreviewed
CVE-2025-7579 was published Jul 14, 2025
Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams Moderate
CVE-2025-53506 was published for org.apache.tomcat:tomcat-coyote (Maven) Jul 10, 2025
fabien-chebel
Credited to fabien-chebel
Zimbra Collaboration Suite (ZCS) before 9.0.0 Patch 46, 10.0.x before 10.0.15, and 10.1.x before... High Unreviewed
CVE-2025-53645 was published Jul 9, 2025
Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized... Moderate Unreviewed
CVE-2025-49722 was published Jul 8, 2025
Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny... Moderate Unreviewed
CVE-2025-49716 was published Jul 8, 2025
MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading... Moderate Unreviewed
CVE-2025-6712 was published Jul 7, 2025
MongoDB Server's mongos component can become unresponsive to new connections due to incorrect... High Unreviewed
CVE-2025-6714 was published Jul 7, 2025
A vulnerability classified as problematic has been found in vercel hyper up to 3.4.1. This... Moderate Unreviewed
CVE-2025-7074 was published Jul 5, 2025
A vulnerability has been found in IROAD Dashcam Q9 up to 20250624 and classified as problematic.... Moderate Unreviewed
CVE-2025-7070 was published Jul 5, 2025
Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - IPInfo... High Unreviewed
CVE-2025-53481 was published Jul 4, 2025
n8n Vulnerable to Denial of Service via Malformed Binary Data Requests Moderate
CVE-2025-49595 was published for n8n (npm) Jul 3, 2025
pfelilpe LucianoSorrentino95
agustedone ivov ffaggiani
Credited to pfelilpe, LucianoSorrentino95, agustedone, ivov, and ffaggiani
It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting... High Unreviewed
CVE-2025-6297 was published Jul 1, 2025
A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue... Moderate Unreviewed
CVE-2025-6817 was published Jun 28, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database