GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
7 advisories
ormar is vulnerable to SQL Injection through aggregate functions min() and max()
Critical
CVE-2026-26198
was published
for
ormar
(pip)
Feb 23, 2026
Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator
High
CVE-2026-44716
was published
for
pipecat-ai
(pip)
May 15, 2026
Open WebUI: Sibling-Prefix Path Traversal via /cache/{path}
Moderate
CVE-2026-54014
was published
for
open-webui
(pip)
Jun 17, 2026
BBOT: Symlink-Following Arbitrary Write via github_workflows Module
Low
CVE-2026-12567
was published
for
bbot
(pip)
Jun 18, 2026
jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories
High
CVE-2026-54528
was published
for
jupyterlab-git
(pip)
Jun 19, 2026
ChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainer
Moderate
GHSA-wvrh-2f4m-924v
was published
for
ChatterBot
(pip)
Jun 19, 2026
FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data
Moderate
CVE-2026-53656
was published
for
fiftyone
(pip)
Jul 15, 2026
ProTip!
Advisories are also available from the
GraphQL API