Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,508
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

807 advisories

Loading
Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service Moderate
CVE-2026-59203 was published for pillow (pip) Jul 20, 2026
jiagongzheng-stack Credited to jiagongzheng-stack
protobufjs: Denial of Service via infinite loop in .proto option parsing Moderate
CVE-2026-59877 was published for protobufjs (npm) Jul 20, 2026
bilerden Credited to bilerden
node-tar: Negative tar entry size causes infinite loop in archive replace High
CVE-2026-59874 was published for tar (npm) Jul 20, 2026
Jvr2022 Credited to Jvr2022
SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 allows authenticated users... High Unreviewed
CVE-2025-71397 was published Jul 18, 2026
barebox version prior to 2026.04.0 contains a denial-of-service vulnerability in ext4 directory... Moderate Unreviewed
CVE-2026-34962 was published May 12, 2026
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a... Moderate Unreviewed
CVE-2026-7771 was published Jul 17, 2026
HTML::Bare versions through 0.04 for Perl will hang in an infinite loop when parsing malformed... High Unreviewed
CVE-2026-13397 was published Jul 16, 2026
XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed... High Unreviewed
CVE-2026-13401 was published Jul 16, 2026
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix ttm_bo_swapout(... Moderate Unreviewed
CVE-2026-52965 was published Jun 24, 2026
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services ... High Unreviewed
CVE-2026-50647 was published Jul 14, 2026
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services ... Moderate Unreviewed
CVE-2026-50324 was published Jul 14, 2026
Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an... High Unreviewed
CVE-2026-54119 was published Jul 14, 2026
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the... Moderate Unreviewed
CVE-2026-62642 was published Jul 14, 2026
In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop... Moderate Unreviewed
CVE-2025-71267 was published Mar 18, 2026
In the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite... Moderate Unreviewed
CVE-2025-38727 was published Sep 5, 2025
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid infinite loops... Critical Unreviewed
CVE-2026-31448 was published Apr 22, 2026
In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: check return... Moderate Unreviewed
CVE-2025-71266 was published Mar 18, 2026
In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop... Moderate Unreviewed
CVE-2025-71265 was published Mar 18, 2026
libexpat before 2.7.5 allows an infinite loop while parsing DTD content. Moderate Unreviewed
CVE-2026-32777 was published Mar 16, 2026
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix soft lockups in... Moderate Unreviewed
CVE-2024-56703 was published Dec 28, 2024
json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS High
GHSA-xf7x-x43h-rpqh was published for json-repair (pip) Jul 13, 2026
GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single... Moderate Unreviewed
CVE-2026-56289 was published Jul 9, 2026
pypdf: Possible infinite loop when processing threads/articles in writer Moderate
CVE-2026-54651 was published for pypdf (pip) Jul 9, 2026
k0w4lzk1 Credited to k0w4lzk1 and stefan6419846 stefan6419846 stefan6419846
Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow... Moderate Unreviewed
CVE-2026-15163 was published Jul 8, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: stop hash:... Moderate Unreviewed
CVE-2026-52921 was published Jun 24, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database