Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
92
GitHub Actions
54
Go
4,275
Maven
5,000+
npm
5,000+
NuGet
1,029
pip
5,000+
Pub
13
RubyGems
1,104
Rust
1,489
Swift
61
Unreviewed advisories
All unreviewed
5,000+

4 advisories

Loading
Glances has arbitrary file write and command execution via `secure_popen` redirection and chaining operators in AMP command configuration High
CVE-2026-53925 was published for glances (pip) Jun 23, 2026
sondt99 Credited to sondt99 and dungNHVhust dungNHVhust dungNHVhust
PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters High
GHSA-c969-5x3p-vq3v was published for praisonaiagents (pip) Jun 18, 2026
sondt99 Credited to sondt99
PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal High
GHSA-2rcg-mm5h-xchx was published for praisonaiagents (pip) Jun 18, 2026
sondt99 Credited to sondt99
Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient High
CVE-2026-49853 was published for tornado (pip) Jun 15, 2026
noobone123 Credited to noobone123, SnailSploit, 0xHunSec, and sondt99 SnailSploit SnailSploit
0xHunSec 0xHunSec sondt99 sondt99
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database