GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
5 advisories
Flight vulnerable to sensitive information disclosure via default error handler
High
CVE-2026-42552
was published
for
flightphp/core
(Composer)
May 6, 2026
Flight: HTTP method override enabled by default, facilitating CSRF escalation and middleware bypass
High
CVE-2026-42551
was published
for
flightphp/core
(Composer)
May 6, 2026
Flight vulnerable to SQL Injection via unvalidated identifiers in SimplePdo::insert / update / delete
High
CVE-2026-42550
was published
for
flightphp/core
(Composer)
May 6, 2026
Flight has path traversal in `make:controller` CLI that creates arbitrary directories outside project root
Moderate
CVE-2026-42549
was published
for
flightphp/core
(Composer)
May 6, 2026
Flight has reflected XSS through an unvalidated JSONP callback in Flight::jsonp()
High
CVE-2026-42548
was published
for
flightphp/core
(Composer)
May 6, 2026
ProTip!
Advisories are also available from the
GraphQL API