Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,883
Maven
5,000+
npm
5,000+
NuGet
1,134
pip
5,000+
Pub
13
RubyGems
1,159
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,555
Rust
20

19 advisories

Loading
A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not... Moderate Unreviewed
CVE-2026-104047 was published Oct 6, 2026
A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names... Moderate Unreviewed
CVE-2026-104040 was published Oct 6, 2026
fast-uri vulnerable to host confusion via percent-encoded authority delimiters High
CVE-2026-6322 was published for fast-uri (npm) May 8, 2026
Jvr2022 Credited to Jvr2022, mcollina, UlisesGascon, climba03003, zakaryan2004, and jlang-ih mcollina mcollina
UlisesGascon UlisesGascon climba03003 climba03003 zakaryan2004 zakaryan2004 jlang-ih jlang-ih
Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47... Moderate Unreviewed
CVE-2026-33457 was published Apr 10, 2026
Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an... Moderate Unreviewed
CVE-2026-33456 was published Apr 10, 2026
Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated... Moderate Unreviewed
CVE-2026-33455 was published Apr 10, 2026
An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and... Moderate Unreviewed
CVE-2025-52989 was published Jul 11, 2025
Improper neutralization of Livestatus command delimiters in autocomplete endpoint within the... Moderate Unreviewed
CVE-2025-32918 was published Jul 4, 2025
OctoPrint Vulnerable to Denial of Service through malformed HTTP request in OctoPrint Moderate
CVE-2025-48879 was published for OctoPrint (pip) Jun 10, 2025
jacopotediosi Credited to jacopotediosi
Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus... Moderate Unreviewed
CVE-2024-38866 was published May 27, 2025
Improper neutralization of livestatus command delimiters in a specific endpoint within RestAPI of... Moderate Unreviewed
CVE-2024-38865 was published Apr 10, 2025
Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows... Moderate Unreviewed
CVE-2024-42385 was published Nov 18, 2024
Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows... Moderate Unreviewed
CVE-2024-42392 was published Nov 18, 2024
fish-shop/syntax-check Improper Neutralization of Delimiters Moderate
CVE-2024-42482 was published for fish-shop/syntax-check (GitHub Actions) Aug 12, 2024
marcransome Credited to marcransome
Improper neutralization of livestatus command delimiters in mknotifyd in Checkmk <= 2.0.0p39, < 2... Moderate Unreviewed
CVE-2024-6542 was published Jul 22, 2024
Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk ... High Unreviewed
CVE-2023-6156 was published Nov 22, 2023
Improper neutralization of livestatus command delimiters in ajax_search in Checkmk <= 2.0.0p39, <... High Unreviewed
CVE-2023-6157 was published Nov 22, 2023
Field injection in the KirbyData text storage handler High
CVE-2023-38488 was published for getkirby/cms (Composer) Jul 28, 2023
dapatrese Credited to dapatrese
Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, <... High Unreviewed
CVE-2023-31208 was published May 17, 2023
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database