GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
7 advisories
Nuxt dev server discloses project root and workspace UUID via the Chrome DevTools workspace endpoint
Moderate
GHSA-7c4v-fwgw-9rf7
was published
for
nuxt
(npm)
Aug 7, 2026
go-git: Malicious reference names may modify files outside the reference storage
Moderate
CVE-2026-71557
was published
for
github.com/go-git/go-git/v5
(Go)
Aug 7, 2026
File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)
Critical
CVE-2026-54088
was published
for
github.com/filebrowser/filebrowser/v2
(Go)
Jul 10, 2026
chi Has an IP Spoofing Vulnerability in `middleware.RealIP`
Moderate
GHSA-3fxj-6jh8-hvhx
was published
for
github.com/go-chi/chi/v5/middleware
(Go)
Jun 25, 2026
Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services
Moderate
CVE-2026-54761
was published
for
github.com/traefik/traefik
(Go)
Jun 17, 2026
Composer has a command injection via malicious perforce repository
High
CVE-2026-40176
was published
for
composer/composer
(Composer)
Apr 14, 2026
File Browser has a Command Injection via Hook Runner
High
CVE-2026-35585
was published
for
github.com/filebrowser/filebrowser/v2
(Go)
Apr 8, 2026
ProTip!
Advisories are also available from the
GraphQL API