Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

118 advisories

Loading
senaite.core Vulnerable to Eval Injection and Missing Authorization Critical
CVE-2026-54569 was published for senaite.core (pip) Aug 26, 2026
snomi Credited to snomi and Volcore Volcore Volcore
OpenWISP IPAM has broken object-level authorization: ExportSubnetView lets a member of one organization export another organization's subnet and all its IP addresses Moderate
GHSA-x287-5c68-36wp was published for openwisp-ipam (pip) Aug 26, 2026
dizconnectz Credited to dizconnectz and nemesifier nemesifier nemesifier
PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforced High
CVE-2026-55541 was published for PraisonAI (pip) Aug 25, 2026
saisathvik1 Credited to saisathvik1
praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool Moderate
CVE-2026-55530 was published for praisonaiagents (pip) Aug 25, 2026
SnailSploit Credited to SnailSploit
praisonaiagents: AgentServer declares auth_token but never enforces it on any route High
CVE-2026-55528 was published for praisonaiagents (pip) Aug 25, 2026
SnailSploit Credited to SnailSploit
django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff Moderate
CVE-2026-61663 was published for django-cms (pip) Aug 20, 2026
doanmanhducz Credited to doanmanhducz and nichoc0 nichoc0 nichoc0
django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass) Moderate
CVE-2026-63003 was published for django-cms (pip) Aug 20, 2026
fsbraun Credited to fsbraun
django CMS: Structure endpoint bypasses page-view permission Moderate
CVE-2026-54624 was published for django-cms (pip) Aug 20, 2026
Zyy0530 Credited to Zyy0530, Str1ckl4nd, 7thParkk, and mauriceng98 Str1ckl4nd Str1ckl4nd
7thParkk 7thParkk mauriceng98 mauriceng98
Lemur: Missing authorization check on POST /certificates/<id>/export for plugins with requires_key = False Moderate
CVE-2026-71322 was published for lemur (pip) Aug 18, 2026
sour-exploit Credited to sour-exploit
Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority Moderate
CVE-2026-71317 was published for lemur (pip) Aug 18, 2026
maperu Credited to maperu
Lemur: Unchecked `replaces[]` lets any user silence notifications and hijack auto-rotation for arbitrary certificates High
CVE-2026-71308 was published for lemur (pip) Aug 18, 2026
maperu Credited to maperu
Lemur: Authenticated low-privilege users can read plaintext destination credentials (SFTP password / private-key passphrase) via the destinations API High
CVE-2026-71307 was published for lemur (pip) Aug 18, 2026
geo-chen Credited to geo-chen
GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data High
CVE-2026-55178 was published for @geolens/sdk (npm) Aug 18, 2026
Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder High
CVE-2026-70494 was published for open-webui (pip) Aug 4, 2026
legobattman Credited to legobattman and Classic298 Classic298 Classic298
Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata Moderate
CVE-2026-70487 was published for open-webui (pip) Aug 4, 2026
whyiug Credited to whyiug and Classic298 Classic298 Classic298
Open WebUI: Users denied the image-generation permission can still generate images via chat completions Moderate
CVE-2026-70484 was published for open-webui (pip) Aug 4, 2026
DavidCarliez Credited to DavidCarliez and Classic298 Classic298 Classic298
Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint Low
CVE-2026-70483 was published for open-webui (pip) Aug 4, 2026
GabrielGomesAL Credited to GabrielGomesAL and Classic298 Classic298 Classic298
Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages Moderate
CVE-2026-70481 was published for open-webui (pip) Aug 4, 2026
Foxer131 Credited to Foxer131 and Classic298 Classic298 Classic298
Open WebUI: Arena task endpoints can bypass underlying model access controls Moderate
CVE-2026-59225 was published for open-webui (pip) Jul 24, 2026
rexpository Credited to rexpository and Classic298 Classic298 Classic298
Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB) Moderate
CVE-2026-59217 was published for open-webui (pip) Jul 24, 2026
jagstack Credited to jagstack and Classic298 Classic298 Classic298
Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id High
CVE-2026-59216 was published for open-webui (pip) Jul 24, 2026
waiveyk Credited to waiveyk and Classic298 Classic298 Classic298
Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids) High
CVE-2026-59714 was published for open-webui (pip) Jul 24, 2026
sfwani Credited to sfwani, DavidCarliez, and Classic298 DavidCarliez DavidCarliez
Classic298 Classic298
Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission Moderate
CVE-2026-59227 was published for open-webui (pip) Jul 24, 2026
jagstack Credited to jagstack and Classic298 Classic298 Classic298
Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation Low
CVE-2026-59226 was published for open-webui (pip) Jul 24, 2026
rexpository Credited to rexpository and Classic298 Classic298 Classic298
MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks High
CVE-2026-52870 was published for mcp (pip) Jul 16, 2026
cjmielke Credited to cjmielke, dewankpant, and shrutilohani dewankpant dewankpant
shrutilohani shrutilohani
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database