GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
6 advisories
Ech0's Unauthenticated Like Endpoint Enables Arbitrary Engagement Metric Inflation
Moderate
GHSA-rgj7-vg8v-j4wr
was published
for
github.com/lin-snow/ech0
(Go)
May 7, 2026
Daptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change
Moderate
GHSA-258c-965c-p3hc
was published
for
github.com/daptin/daptin
(Go)
May 7, 2026
Daptin: SQL injection via unvalidated goqu.L() calls in aggregate API
High
CVE-2026-41422
was published
for
github.com/daptin/daptin
(Go)
Apr 22, 2026
Ech0 has Unauthenticated Server-Side Request Forgery in Website Preview Feature
High
CVE-2026-35036
was published
for
github.com/lin-snow/ech0
(Go)
Apr 3, 2026
Vikunja’s Improper Access Control Enables Bypass of Administrator-Imposed Account Disablement
High
CVE-2026-33316
was published
for
code.vikunja.io/api
(Go)
Mar 20, 2026
Vikunja Vulnerable to Account Takeover via Password Reset Token Reuse
Critical
CVE-2026-28268
was published
for
code.vikunja.io/api
(Go)
Feb 28, 2026
ProTip!
Advisories are also available from the
GraphQL API