Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

919 advisories

Loading
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 5.2 prior to 18.2.8,... Moderate Unreviewed
CVE-2025-2934 was published Oct 9, 2025
If a user tries to login but the provided credentials are incorrect a log is created. The data... Moderate Unreviewed
CVE-2025-58582 was published Oct 6, 2025
A user with the appropriate authorization can create any number of user accounts via an API ... Low Unreviewed
CVE-2025-58578 was published Oct 6, 2025
An allocation of resources without limits or throttling vulnerability has been reported to affect... High Unreviewed
CVE-2025-44012 was published Oct 3, 2025
An allocation of resources without limits or throttling vulnerability has been reported to affect... High Unreviewed
CVE-2025-44006 was published Oct 3, 2025
An allocation of resources without limits or throttling vulnerability has been reported to affect... High Unreviewed
CVE-2025-44007 was published Oct 3, 2025
An allocation of resources without limits or throttling vulnerability has been reported to affect... High Unreviewed
CVE-2025-33040 was published Oct 3, 2025
An allocation of resources without limits or throttling vulnerability has been reported to affect... High Unreviewed
CVE-2025-33039 was published Oct 3, 2025
In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform... Moderate Unreviewed
CVE-2025-20370 was published Oct 1, 2025
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to a denial of service, caused by... Moderate Unreviewed
CVE-2025-36099 was published Sep 29, 2025
Denial of Service issue in GraphQL endpoints in Gitlab EE/CE affecting all versions from 11.10... High Unreviewed
CVE-2025-8014 was published Sep 27, 2025
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 before 18.2.7,... Moderate Unreviewed
CVE-2025-11042 was published Sep 26, 2025
An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.2.7, 18.3... Low Unreviewed
CVE-2025-10867 was published Sep 26, 2025
An issue was discovered in GitLab CE/EE affecting all versions before 18.2.7, 18.3 before 18.3.3,... High Unreviewed
CVE-2025-10858 was published Sep 26, 2025
libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a... High Unreviewed
CVE-2025-59375 was published Sep 15, 2025
IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00... Moderate Unreviewed
CVE-2025-36035 was published Sep 14, 2025
An issue has been discovered in GitLab CE/EE affecting all versions from 15.0 before 18.1.6, 18.2... Moderate Unreviewed
CVE-2025-1250 was published Sep 12, 2025
An issue has been discovered in GitLab CE/EE affecting all versions from 7.8 before 18.1.6, 18.2... Moderate Unreviewed
CVE-2025-7337 was published Sep 12, 2025
IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a remote... Moderate Unreviewed
CVE-2024-45669 was published Sep 10, 2025
The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service ... High Unreviewed
CVE-2014-125127 was published Sep 3, 2025
An allocation of resources without limits or throttling vulnerability has been reported to affect... High Unreviewed
CVE-2025-30261 was published Aug 29, 2025
An allocation of resources without limits or throttling vulnerability has been reported to affect... High Unreviewed
CVE-2025-30260 was published Aug 29, 2025
An allocation of resources without limits or throttling vulnerability has been reported to affect... High Unreviewed
CVE-2025-29890 was published Aug 29, 2025
An allocation of resources without limits or throttling vulnerability has been reported to affect... High Unreviewed
CVE-2025-29899 was published Aug 29, 2025
An allocation of resources without limits or throttling vulnerability has been reported to affect... High Unreviewed
CVE-2025-29900 was published Aug 29, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database