GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
4 advisories
compliance-trestle Vulnerable to SSRF in Remote Fetching Subsystem
Moderate
CVE-2026-46380
was published
for
compliance-trestle
(pip)
May 28, 2026
compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal
Moderate
CVE-2026-45774
was published
for
compliance-trestle
(pip)
May 28, 2026
compliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path Traversal
High
CVE-2026-45725
was published
for
compliance-trestle
(pip)
May 27, 2026
Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data Manipulation
Moderate
CVE-2026-45396
was published
for
open-webui
(pip)
May 14, 2026
ProTip!
Advisories are also available from the
GraphQL API