GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
6 advisories
xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion
High
CVE-2026-34601
was published
for
@xmldom/xmldom
(npm)
Apr 1, 2026
basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering
High
CVE-2026-44240
was published
for
basic-ftp
(npm)
May 6, 2026
Systeminformation vulnerable to Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name
High
CVE-2026-44724
was published
for
systeminformation
(npm)
May 13, 2026
Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning
High
CVE-2026-67320
was published
for
axios
(npm)
Jul 20, 2026
hono/jsx does not isolate context per request, leading to cross-request data disclosure
Moderate
CVE-2026-59896
was published
for
hono
(npm)
Jul 21, 2026
vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass
Critical
CVE-2026-92956
was published
for
vm2
(npm)
Oct 5, 2026
ProTip!
Advisories are also available from the
GraphQL API