GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
3 advisories
NiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File Write
High
CVE-2026-25732
was published
for
nicegui
(pip)
Feb 5, 2026
Dozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access
High
CVE-2026-24740
was published
for
github.com/amir20/dozzle
(Go)
Jan 27, 2026
Orval Mock Generation Code Injection via const
High
CVE-2026-24132
was published
for
@orval/mock
(npm)
Jan 22, 2026
ProTip!
Advisories are also available from the
GraphQL API