GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
9 advisories
Gogs vulnerable to RCE via git rebase --exec argument injection in pull request merge
Critical
CVE-2026-52806
was published
for
gogs.io/gogs
(Go)
Jun 23, 2026
WeKnora has Command Injection in MCP stdio test
Critical
CVE-2026-22688
was published
for
github.com/Tencent/WeKnora
(Go)
Jan 9, 2026
goshs route not protected, allows command execution
Critical
CVE-2025-46816
was published
for
github.com/patrickhener/goshs
(Go)
May 6, 2025
Grafana Command Injection And Local File Inclusion Via Sql Expressions
Critical
CVE-2024-9264
was published
for
github.com/grafana/grafana
(Go)
Oct 18, 2024
Command Injection Vulnerability with Mercurial in VCS
Critical
CVE-2022-21235
was published
for
github.com/Masterminds/vcs
(Go)
Apr 1, 2022
ProTip!
Advisories are also available from the
GraphQL API