GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
5 advisories
YesWiki: Authenticated (Admin) Server-Side Template Injection to Remote Code Execution via Bazar Semantic Templates
High
CVE-2026-52762
was published
for
yeswiki/yeswiki
(Composer)
Jul 9, 2026
YesWiki Vulnerable to Unauthenticated ActivityPub Signature-Verification Bypass via `!openssl_verify(...)` accepting `int(-1)`
High
CVE-2026-52767
was published
for
yeswiki/yeswiki
(Composer)
Jul 9, 2026
Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method
Moderate
CVE-2026-101902
was published
for
axios
(npm)
Sep 30, 2026
Hydra instantiate target blacklist bypasses permit code execution
High
CVE-2026-106442
was published
for
hydra-core
(pip)
Oct 7, 2026
Hydra logging configuration permits unsafe callable resolution
High
CVE-2026-106441
was published
for
hydra-core
(pip)
Oct 7, 2026
ProTip!
Advisories are also available from the
GraphQL API