GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
6 advisories
Pimcore vulnerable to SQL injection via unsanitized filter value in Dependency Dao RLIKE clause
Moderate
CVE-2026-27461
was published
for
pimcore/pimcore
(Composer)
Feb 24, 2026
Mautic is Vulnerable to SQL Injection through Contact Activity API Sorting
High
CVE-2026-3105
was published
for
mautic/core
(Composer)
Feb 25, 2026
AzuraCast: RCE via Liquidsoap string interpolation injection in station metadata and playlist URLs
High
GHSA-93fx-5qgc-wr38
was published
for
azuracast/azuracast
(Composer)
Mar 9, 2026
Craft CMS vulnerable to behavior injection RCE via EntryTypesController
High
CVE-2026-32263
was published
for
craftcms/cms
(Composer)
Mar 16, 2026
Froxlor is vulnerable to BIND zone file injection via unsanitized DNS record content in DomainZones API
High
CVE-2026-30932
was published
for
froxlor/froxlor
(Composer)
Mar 24, 2026
Craft CMS: RCE via missing cleanseConfig in FieldsController::actionRenderCardPreview
High
CVE-2026-56382
was published
for
craftcms/cms
(Composer)
Jul 9, 2026
ProTip!
Advisories are also available from the
GraphQL API