GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,359
Erlang
33
GitHub Actions
22
Go
2,126
Maven
5,000+
npm
3,787
NuGet
683
pip
3,467
Pub
12
RubyGems
894
Rust
892
Swift
38
Unreviewed advisories
All unreviewed
5,000+
2,444 advisories
Filter by severity
Node Denial of Service via kubelet Checkpoint API
Moderate
CVE-2025-0426
was published
for
k8s.io/kubernetes
(Go)
Feb 13, 2025
Internet Connection Sharing (ICS) Denial of Service Vulnerability
Moderate
Unreviewed
CVE-2025-21352
was published
Feb 11, 2025
Windows Active Directory Domain Services API Denial of Service Vulnerability
High
Unreviewed
CVE-2025-21351
was published
Feb 11, 2025
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
High
Unreviewed
CVE-2025-21181
was published
Feb 11, 2025
A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3...
Moderate
Unreviewed
CVE-2024-23814
was published
Feb 11, 2025
Denial of Service attack on windows app using Netty
Moderate
CVE-2025-25193
was published
for
io.netty:netty-common
(Maven)
Feb 10, 2025
Possible DoS by memory exhaustion in net-imap
Moderate
CVE-2025-25186
was published
for
net-imap
(RubyGems)
Feb 10, 2025
Apache James vulnerable to denial of service through the use of IMAP literals
High
CVE-2024-37358
was published
for
org.apache.james.protocols:protocols-imap
(Maven)
Feb 6, 2025
Apache James vulnerable to denial of service through JMAP HTML to text conversion
High
CVE-2024-45626
was published
for
org.apache.james:james-server-jmap-draft
(Maven)
Feb 6, 2025
When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can...
High
Unreviewed
CVE-2025-20058
was published
Feb 5, 2025
When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing...
High
Unreviewed
CVE-2025-21087
was published
Feb 5, 2025
A vulnerability, which was classified as problematic, was found in JoeyBling bootplus up to...
Moderate
Unreviewed
CVE-2025-0704
was published
Jan 24, 2025
Apache Wicket: An attacker can intentionally trigger a memory leak
Critical
CVE-2024-53299
was published
for
org.apache.wicket:wicket-core
(Maven)
Jan 23, 2025
Excessive Platform Resource Consumption within a Loop when unmarshalling Compose file having recursive loop
Moderate
CVE-2024-10846
was published
for
github.com/compose-spec/compose-go/v2
(Go)
Jan 21, 2025
Apache CXF: Denial of Service vulnerability with temporary files
High
CVE-2025-23184
was published
for
org.apache.cxf:cxf-core
(Maven)
Jan 21, 2025
Windows upnphost.dll Denial of Service Vulnerability
High
Unreviewed
CVE-2025-21389
was published
Jan 14, 2025
Windows Remote Desktop Services Denial of Service Vulnerability
High
Unreviewed
CVE-2025-21330
was published
Jan 14, 2025
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
High
Unreviewed
CVE-2025-21290
was published
Jan 14, 2025
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
High
Unreviewed
CVE-2025-21289
was published
Jan 14, 2025
Windows upnphost.dll Denial of Service Vulnerability
High
Unreviewed
CVE-2025-21300
was published
Jan 14, 2025
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
High
Unreviewed
CVE-2025-21270
was published
Jan 14, 2025
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
High
Unreviewed
CVE-2025-21251
was published
Jan 14, 2025
Windows Kerberos Denial of Service Vulnerability
High
Unreviewed
CVE-2025-21218
was published
Jan 14, 2025
Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
High
Unreviewed
CVE-2025-21207
was published
Jan 14, 2025
ProTip!
Advisories are also available from the
GraphQL API