Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,584
Rust
21

920 advisories

Loading
The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as... Moderate Unreviewed
CVE-2026-119738 was published Nov 2, 2026
A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the... High Unreviewed
CVE-2026-120596 was published Nov 2, 2026
Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_header() in src/encmain.c... Moderate Unreviewed
CVE-2026-120458 was published Nov 2, 2026
imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in... Moderate Unreviewed
CVE-2026-120251 was published Nov 1, 2026
A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter... High Unreviewed
CVE-2026-120194 was published Oct 31, 2026
pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search High
CVE-2026-119203 was published for pypdf (pip) Oct 30, 2026
smaeljaish771 Credited to smaeljaish771
pypdf has possible infinite loop when cloning dictionaries High
CVE-2026-119205 was published for pypdf (pip) Oct 30, 2026
smaeljaish771 Credited to smaeljaish771 and KeenSecurityLab KeenSecurityLab KeenSecurityLab
Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891) Low
CVE-2026-118781 was published for node-forge (npm) Oct 30, 2026
russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang) Moderate
CVE-2026-116774 was published for russh (Rust) Oct 30, 2026
P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck... High Unreviewed
CVE-2026-111731 was published Oct 29, 2026
Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS) High
CVE-2026-116581 was published for seroval (npm) Oct 28, 2026
realies Credited to realies
A malicious X server could send malformed  RECORD EnableContext reolies that can cause a X client... Moderate Unreviewed
CVE-2026-109088 was published Oct 27, 2026
Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH Moderate
CVE-2026-115774 was published for Twisted (pip) Oct 23, 2026
arkmarta Credited to arkmarta
Pillow: TarIO negative size field causes infinite CPU-spin loop High
CVE-2026-96642 was published for Pillow (pip) Oct 22, 2026
0xSmiley Credited to 0xSmiley and radarhere radarhere radarhere
In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with... Moderate Unreviewed
CVE-2026-66281 was published Oct 22, 2026
HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service ... High Unreviewed
CVE-2026-110354 was published Oct 22, 2026
Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle High
CVE-2026-112406 was published for Pillow (pip) Oct 21, 2026
Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree() Moderate
CVE-2026-112391 was published for Pillow (pip) Oct 21, 2026
0xSmiley Credited to 0xSmiley
Pillow: Infinite loop in MIC n_frames when the embedded TIFF High
CVE-2026-112390 was published for Pillow (pip) Oct 21, 2026
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that... Moderate Unreviewed
CVE-2026-76445 was published Oct 21, 2026
Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine... Moderate Unreviewed
CVE-2026-20019 was published Oct 21, 2026
pypdf: Possible infinite loop in PdfWriter.find_outline_item Moderate
CVE-2026-113792 was published for pypdf (pip) Oct 21, 2026
stefan6419846 Credited to stefan6419846
pypdf: Possible infinite loop when removing tree items Moderate
CVE-2026-113793 was published for pypdf (pip) Oct 21, 2026
manus-pi Credited to manus-pi and stefan6419846 stefan6419846 stefan6419846
pypdf: Possible infinite loop when hitting EOF in standard xref table Moderate
CVE-2026-113794 was published for pypdf (pip) Oct 21, 2026
stefan6419846 Credited to stefan6419846
Dulwich before 1.2.9 contains a denial of service vulnerability in Pack.resolve_object that... High Unreviewed
CVE-2026-114095 was published Oct 21, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database