GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
6 advisories
Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses
Critical
CVE-2026-12537
was published
for
@google/gemini-cli
(GitHub Actions)
Apr 24, 2026
wenxian: Command Injection in GitHub Actions Workflow via `issue_comment.body`
Critical
CVE-2026-34243
was published
for
njzjz/wenxian
(GitHub Actions)
Mar 29, 2026
Zen-AI-Pentest has Shell Injection via untrusted issue title in ZenClaw Discord Integration workflow
Critical
GHSA-f67f-hcr6-94mf
was published
for
SHAdd0WTAka/Zen-Ai-Pentest
(GitHub Actions)
Mar 20, 2026
Cromwell GitHub Actions Secrets exfiltration via `Issue_comment`
Critical
GHSA-phf6-hm3h-x8qp
was published
for
broadinstitute/cromwell
(GitHub Actions)
May 28, 2025
ProTip!
Advisories are also available from the
GraphQL API