GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,840
Erlang
36
GitHub Actions
33
Go
2,464
Maven
5,000+
npm
4,082
NuGet
723
pip
3,880
Pub
12
RubyGems
943
Rust
1,011
Swift
39
Unreviewed advisories
All unreviewed
5,000+
55 advisories
Filter by severity
A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote,...
Moderate
Unreviewed
CVE-2025-3891
was published
Apr 29, 2025
vLLM allows clients to crash the openai server with invalid regex
Moderate
CVE-2025-48943
was published
for
vllm
(pip)
May 28, 2025
vLLM DOS: Remotely kill vllm over http with invalid JSON schema
Moderate
CVE-2025-48942
was published
for
vllm
(pip)
May 28, 2025
Deserialization vulnerability in the IPC module
Impact: Successful exploitation of this...
Moderate
Unreviewed
CVE-2025-48907
was published
Jun 6, 2025
Elasticsearch Uncaught Exception leading to crash
Moderate
CVE-2024-23449
was published
for
org.elasticsearch:elasticsearch
(Maven)
Mar 29, 2024
Some WASM source files could have caused a crash when loaded in devtools. This vulnerability...
Moderate
Unreviewed
CVE-2024-0754
was published
Jan 23, 2024
Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an...
Moderate
Unreviewed
CVE-2025-20054
was published
May 13, 2025
The vulnerability allows any authenticated user to cause the PeerTube server to stop functioning...
Moderate
Unreviewed
CVE-2025-32944
was published
Apr 15, 2025
Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to client-side Denial of...
Moderate
Unreviewed
CVE-2024-49705
was published
Apr 14, 2025
An unhandled exception in the danny-avila/librechat repository, version git 600d217, can cause...
Moderate
Unreviewed
CVE-2024-11173
was published
Mar 20, 2025
Go Ethereum vulnerable to DoS via malicious p2p message
Moderate
CVE-2025-24883
was published
for
github.com/ethereum/go-ethereum
(Go)
Jan 30, 2025
In flashc, there is a possible information disclosure due to an uncaught exception. This could...
Moderate
Unreviewed
CVE-2024-20049
was published
Apr 1, 2024
Denial of service in DNS-over-QUIC in Technitium DNS Server <= v13.2.2 allows remote attackers to...
Moderate
Unreviewed
CVE-2024-56946
was published
Feb 3, 2025
In thermal, there is a possible memory corruption due to an uncaught exception. This could lead...
Moderate
Unreviewed
CVE-2023-20628
was published
Mar 7, 2023
With a specially crafted Python script, an attacker could send
continuous startMeasurement...
Moderate
Unreviewed
CVE-2025-24836
was published
Feb 14, 2025
engine.io Uncaught Exception vulnerability
Moderate
CVE-2023-31125
was published
for
engine.io
(npm)
May 3, 2023
Uncaught exception in OpenBMC Firmware for the Intel(R) Server M50FCP Family and Intel(R) Server...
Moderate
Unreviewed
CVE-2025-20097
was published
Feb 13, 2025
IBM EntireX 11.1 could allow a local user to cause a denial of service due to an unhandled error...
Moderate
Unreviewed
CVE-2025-0158
was published
Feb 6, 2025
Specifically crafted payloads sent to the RFID reader could cause DoS of RFID reader. After the...
Moderate
Unreviewed
CVE-2024-13417
was published
Feb 6, 2025
In PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop...
Moderate
Unreviewed
CVE-2023-21087
was published
Apr 19, 2023
Unexpected server crash in database driver in M-Files Server before 25.1.14445.5 allows a highly...
Moderate
Unreviewed
CVE-2025-0648
was published
Jan 23, 2025
SurrealDB has an Uncaught Exception Sorting Tables by Random Order
Moderate
GHSA-m52v-24p8-654f
was published
for
surrealdb
(Rust)
Nov 22, 2024
SurrealDB has an Uncaught Exception Handling Nonexistent Role
Moderate
GHSA-jc55-246c-r88f
was published
for
surrealdb
(Rust)
Nov 22, 2024
SurrealDB has an Uncaught Exception in Function Generating Random Time
Moderate
GHSA-h4f5-h82v-5w4r
was published
for
surrealdb
(Rust)
Nov 22, 2024
A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to...
Moderate
Unreviewed
CVE-2024-28835
was published
Mar 21, 2024
ProTip!
Advisories are also available from the
GraphQL API