GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
6 advisories
Idno Vulnerable to Remote Code Execution via Chained Import File Write and Template Path Traversal
High
CVE-2026-28507
was published
for
idno/known
(Composer)
Mar 2, 2026
Idno Vulnerable to Unauthenticated SSRF via URL Unfurl Endpoint
Critical
CVE-2026-28508
was published
for
idno/known
(Composer)
Mar 2, 2026
NiceGUI vulnerable to XSS via Code Injection during client-side element function execution
Moderate
CVE-2026-27156
was published
for
nicegui
(pip)
Feb 24, 2026
Fiber Crashes in BodyParser Due to Unvalidated Large Slice Index in Decoder
High
CVE-2025-54801
was published
for
github.com/gofiber/fiber/v2
(Go)
Aug 5, 2025
chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes
Moderate
CVE-2025-71405
was published
for
github.com/go-chi/chi/v5
(Go)
Jun 20, 2025
pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API
High
CVE-2024-47821
was published
for
pyload-ng
(pip)
Oct 28, 2024
ProTip!
Advisories are also available from the
GraphQL API