GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
7 advisories
Shescape: Quadratic-time denial of service in the flag-protection
High
CVE-2026-73413
was published
for
shescape
(npm)
Jul 24, 2026
Shescape: Home-directory disclosure in assignment context on Unix with Dash
Moderate
CVE-2026-73411
was published
for
shescape
(npm)
Jul 24, 2026
Shescape: Shell injection via unescaped parentheses on Windows with CMD
Critical
CVE-2026-73414
was published
for
shescape
(npm)
Jul 24, 2026
Shescape: Path disclosure on Unix with Zsh
Moderate
CVE-2026-73412
was published
for
shescape
(npm)
Jul 24, 2026
Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash
Moderate
CVE-2026-32094
was published
for
shescape
(npm)
Mar 11, 2026
@eslint/plugin-kit is vulnerable to Regular Expression Denial of Service attacks through ConfigCommentParser
Low
GHSA-xffm-g5w8-qvg7
was published
for
@eslint/plugin-kit
(npm)
Jul 18, 2025
Insufficient permission checking in `Deno.makeTemp*` APIs
Moderate
CVE-2024-27931
was published
for
deno
(Rust)
Mar 5, 2024
ProTip!
Advisories are also available from the
GraphQL API