GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
6 advisories
Filament: Unauthenticated temporary file upload on auth pages
Moderate
CVE-2026-48500
was published
for
filament/filament
(Composer)
Jun 23, 2026
Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS
Moderate
CVE-2026-48167
was published
for
filament/infolists
(Composer)
Jun 23, 2026
Filament: Timing-based user enumeration on login page
Moderate
CVE-2026-48166
was published
for
filament/filament
(Composer)
Jun 23, 2026
Twig: Possible sandbox bypass when using a source policy
High
CVE-2026-24425
was published
for
twig/twig
(Composer)
Jun 5, 2026
LibreNMS /port-groups name Stored Cross-Site Scripting
Moderate
CVE-2026-26992
was published
for
librenms/librenms
(Composer)
Feb 18, 2026
LibreNMS /device-groups name Stored Cross-Site Scripting
Moderate
CVE-2026-26991
was published
for
librenms/librenms
(Composer)
Feb 18, 2026
ProTip!
Advisories are also available from the
GraphQL API