GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
7 advisories
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
High
GHSA-5j98-2g5x-46v6
was published
for
hickory-resolver
(Rust)
Oct 5, 2026
Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning
High
CVE-2026-67320
was published
for
axios
(npm)
Jul 20, 2026
CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification
High
CVE-2026-32936
was published
for
github.com/coredns/coredns
(Go)
Apr 28, 2026
Systeminformation vulnerable to Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name
High
CVE-2026-44724
was published
for
systeminformation
(npm)
May 13, 2026
Microsoft APM: Symlinks under `.apm/prompts/` and `.apm/agents/` are dereferenced during `apm install`, copying host-local file contents into the project tree
High
CVE-2026-45539
was published
for
apm
(pip)
May 18, 2026
basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering
High
CVE-2026-44240
was published
for
basic-ftp
(npm)
May 6, 2026
xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion
High
CVE-2026-34601
was published
for
@xmldom/xmldom
(npm)
Apr 1, 2026
ProTip!
Advisories are also available from the
GraphQL API