GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
3 advisories
Karakeep SDK has SSRF via metascraper-logo-favicon that bypasses validateUrl protections
High
GHSA-7rx4-c5vx-g8w3
was published
for
@karakeep/sdk
(npm)
May 14, 2026
Nginx-UI: Cross-Site WebSocket Hijacking (CSWSH) via missing origin validation on all WebSocket endpoints
High
CVE-2026-34403
was published
for
github.com/0xJacky/Nginx-UI
(Go)
Apr 21, 2026
NocoBase Has SQL Injection via template variable substitution in workflow SQL node
High
CVE-2026-34825
was published
for
@nocobase/plugin-workflow-sql
(npm)
Apr 1, 2026
ProTip!
Advisories are also available from the
GraphQL API