GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,096
Erlang
29
GitHub Actions
19
Go
1,925
Maven
5,000+
npm
3,654
NuGet
638
pip
3,263
Pub
10
RubyGems
873
Rust
823
Swift
35
Unreviewed advisories
All unreviewed
5,000+
209 advisories
Filter by severity
The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently,...
Moderate
Unreviewed
CVE-2022-23889
was published
Jan 29, 2022
GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust...
Moderate
Unreviewed
CVE-2021-46195
was published
Jan 15, 2022
libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c,...
Moderate
Unreviewed
CVE-2020-12825
was published
May 24, 2022
libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name...
High
Unreviewed
CVE-2018-9918
was published
May 13, 2022
pdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream...
Moderate
Unreviewed
CVE-2018-6544
was published
May 13, 2022
An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30....
Moderate
Unreviewed
CVE-2018-9996
was published
May 13, 2022
jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary...
Moderate
Unreviewed
CVE-2018-5759
was published
May 13, 2022
In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image...
Moderate
Unreviewed
CVE-2018-5772
was published
May 13, 2022
Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a...
Moderate
Unreviewed
CVE-2018-11597
was published
May 13, 2022
An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree:...
Moderate
Unreviewed
CVE-2018-11254
was published
May 13, 2022
Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc...
Moderate
Unreviewed
CVE-2018-16426
was published
May 13, 2022
In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) in the...
High
Unreviewed
CVE-2017-9729
was published
May 13, 2022
In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause...
High
Unreviewed
CVE-2017-9766
was published
May 13, 2022
In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in...
Moderate
Unreviewed
CVE-2017-9616
was published
May 13, 2022
It was possible to trigger an infinite recursion condition in the error handler when Hermes...
High
Unreviewed
CVE-2022-27810
was published
Oct 7, 2022
In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion (uncontrolled recursion)...
Moderate
Unreviewed
CVE-2017-9617
was published
May 13, 2022
libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of...
High
Unreviewed
CVE-2017-9304
was published
May 13, 2022
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in...
High
Unreviewed
CVE-2017-5839
was published
May 13, 2022
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017...
Moderate
Unreviewed
CVE-2017-16419
was published
May 13, 2022
There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval:...
High
Unreviewed
CVE-2017-12964
was published
May 13, 2022
There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc)...
High
Unreviewed
CVE-2017-11554
was published
May 13, 2022
There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser...
High
Unreviewed
CVE-2017-11556
was published
May 13, 2022
A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4...
Moderate
Unreviewed
CVE-2017-0692
was published
May 13, 2022
When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp...
Moderate
Unreviewed
CVE-2019-12213
was published
May 24, 2022
poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting...
Moderate
Unreviewed
CVE-2017-7515
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API