GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
5 advisories
AVideo has SSRF Protection Bypass via HTTP Redirect in Image Download Endpoints
Moderate
CVE-2026-33766
was published
for
wwbn/avideo
(Composer)
Mar 26, 2026
StableLib Ed25519 Signature Malleability via Missing S < L Check
Moderate
GHSA-x3ff-w252-2g7j
was published
for
@stablelib/ed25519
(npm)
Apr 1, 2026
File Browser has an access rule bypass via HasPrefix without trailing separator in path matching
Moderate
CVE-2026-35605
was published
for
github.com/filebrowser/filebrowser/v2
(Go)
Apr 8, 2026
File Browser discloses text file content via /api/resources endpoint bypassing Perm.Download check
Moderate
CVE-2026-35606
was published
for
github.com/filebrowser/filebrowser/v2
(Go)
Apr 8, 2026
Cosign's verify-blob-attestation reports false positive when payload parsing fails
Moderate
CVE-2026-39395
was published
for
github.com/sigstore/cosign
(Go)
Apr 8, 2026
ProTip!
Advisories are also available from the
GraphQL API