GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
5 advisories
stigmem-node has blind SSRF via unvalidated webhook subscription delivery_address
Moderate
GHSA-5p3m-vhh6-9236
was published
for
stigmem-node
(pip)
Aug 20, 2026
Formie: Missing authorization in administrative settings allows low-privileged CP users to modify plugin configuration
Moderate
GHSA-cvpc-hccg-wmw4
was published
for
verbb/formie
(Composer)
Jul 17, 2026
Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges
High
CVE-2026-50131
was published
for
@fedify/fedify
(npm)
Jul 14, 2026
rama has Stored XSS in ServeDir HTML directory listing via unescaped file names and URI path
Low
GHSA-cwv4-h3j5-w3cf
was published
for
rama
(Rust)
Jul 7, 2026
Langroid: Path traversal in the file tools allows read/write outside configured current directory
High
CVE-2026-50181
was published
for
langroid
(pip)
Jul 2, 2026
ProTip!
Advisories are also available from the
GraphQL API