GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
49
GitHub Actions
49
Go
3,436
Maven
5,000+
npm
5,000+
NuGet
883
pip
4,694
Pub
13
RubyGems
1,029
Rust
1,212
Swift
53
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
49 advisories
Filter by severity
NVIDIA Triton Inference Server contains a vulnerability where insufficient input validation and a...
High
Unreviewed
CVE-2026-24146
was published
Apr 7, 2026
An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6,...
Moderate
Unreviewed
CVE-2026-35549
was published
Apr 3, 2026
An attacker might be able to trick DNSdist into allocating too much memory while processing DNS...
Moderate
Unreviewed
CVE-2026-24030
was published
Mar 31, 2026
NVIDIA Triton Inference Server contains a vulnerability in the HTTP endpoint where an attacker...
High
Unreviewed
CVE-2026-24158
was published
Mar 24, 2026
dr_libs version 0.13.3 and earlier contain an uncontrolled memory allocation vulnerability in...
Moderate
Unreviewed
CVE-2026-32836
was published
Mar 17, 2026
A Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and...
High
Unreviewed
CVE-2026-28253
was published
Mar 12, 2026
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Nexus 9000...
High
Unreviewed
CVE-2026-20048
was published
Feb 25, 2026
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 is vulnerable...
Moderate
Unreviewed
CVE-2025-2668
was published
Jan 31, 2026
Issue summary: A TLS 1.3 connection using certificate compression can be
forced to allocate a...
Moderate
Unreviewed
CVE-2025-66199
was published
Jan 27, 2026
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9 before 18.3.6, 18...
Low
Unreviewed
CVE-2025-12983
was published
Nov 15, 2025
IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX...
Moderate
Unreviewed
CVE-2025-2534
was published
Nov 7, 2025
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could...
High
Unreviewed
CVE-2025-23331
was published
Aug 6, 2025
IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a denial of service as the server...
Moderate
Unreviewed
CVE-2025-2533
was published
Jul 29, 2025
Redis through 7.4.3 allows memory consumption via a multi-bulk command composed of many bulks,...
Moderate
Unreviewed
CVE-2025-46686
was published
Jul 23, 2025
A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled...
Moderate
Unreviewed
CVE-2025-4605
was published
Jun 11, 2025
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1...
Moderate
Unreviewed
CVE-2025-2518
was published
May 29, 2025
IBM 4769 Developers Toolkit 7.0.0 through 7.5.52 could allow a remote attacker to cause a denial...
High
Unreviewed
CVE-2025-3632
was published
May 12, 2025
A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for...
High
Unreviewed
CVE-2025-20140
was published
May 7, 2025
An allocation-size-too-big error in the parseSWF_DEFINEBINARYDATA function of libming v0.48...
Moderate
Unreviewed
CVE-2025-29491
was published
Mar 27, 2025
A vulnerability in the SIP processing subsystem of Cisco BroadWorks could allow an...
High
Unreviewed
CVE-2025-20165
was published
Jan 22, 2025
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is...
Moderate
Unreviewed
CVE-2024-41762
was published
Dec 7, 2024
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could...
Moderate
Unreviewed
CVE-2024-37071
was published
Dec 7, 2024
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is...
Moderate
Unreviewed
CVE-2024-41761
was published
Nov 23, 2024
A vulnerability in the TL1 function of Cisco Network Convergence System (NCS) 4000 Series...
Moderate
Unreviewed
CVE-2022-20845
was published
Nov 15, 2024
A vulnerability in the VPN and management web servers of the Cisco Adaptive Security Virtual...
High
Unreviewed
CVE-2024-20260
was published
Oct 23, 2024
ProTip!
Advisories are also available from the
GraphQL API