GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
7 advisories
Mise vulnerable to arbitrary command execution via task-include files in an untrusted, config-less repository
High
CVE-2026-55441
was published
for
mise
(Rust)
Jun 23, 2026
Deno: Command Injection via spawnSync & spawn on Windows
High
CVE-2026-49402
was published
for
deno
(Rust)
Jun 16, 2026
Deno vulnerable to command Injection via incomplete shell metacharacter blocklist in node:child_process
High
CVE-2026-32260
was published
for
deno
(Rust)
Mar 13, 2026
zeptoclaw has Android device shell blocklist bypass via argument permutation
High
GHSA-hhjv-jq77-cmvx
was published
for
zeptoclaw
(Rust)
Mar 5, 2026
Deno has a Command Injection via Incomplete shell metacharacter blocklist in node:child_process
High
CVE-2026-27190
was published
for
deno
(Rust)
Feb 19, 2026
Starship vulnerable to shell injection via undocumented, unpredictable shell expansion in custom commands
High
CVE-2024-41815
was published
for
starship
(Rust)
Jul 26, 2024
ProTip!
Advisories are also available from the
GraphQL API