GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
6 advisories
Jackson Core: Document length constraint bypass in blocking, async, and DataInput parsers
High
GHSA-2m67-wjpj-xhg9
was published
for
tools.jackson.core:jackson-core
(Maven)
Apr 4, 2026
LZ4 Java Compression has Out-of-bounds memory operations which can cause DoS
High
CVE-2025-12183
was published
for
at.yawk.lz4:lz4-java
(Maven)
Nov 28, 2025
QOS.CH logback-core Expression Language Injection vulnerability
Moderate
CVE-2024-12798
was published
for
ch.qos.logback:logback-core
(Maven)
Dec 19, 2024
QOS.CH logback-core Server-Side Request Forgery vulnerability
Low
CVE-2024-12801
was published
for
ch.qos.logback:logback-core
(Maven)
Dec 19, 2024
Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider
Moderate
CVE-2024-31141
was published
for
org.apache.kafka:kafka-clients
(Maven)
Nov 19, 2024
SnakeYaml Constructor Deserialization Remote Code Execution
High
CVE-2022-1471
was published
for
org.yaml:snakeyaml
(Maven)
Dec 12, 2022
ProTip!
Advisories are also available from the
GraphQL API