GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
6 advisories
Gogs Vulnerable to Privilege Escalation via Collaboration Access Mode Validation
Moderate
CVE-2026-52804
was published
for
gogs.io/gogs
(Go)
Jun 23, 2026
Karakeep SDK has SSRF via metascraper-logo-favicon that bypasses validateUrl protections
High
GHSA-7rx4-c5vx-g8w3
was published
for
@karakeep/sdk
(npm)
May 14, 2026
Snipe-IT has an open redirect vulnerability
Moderate
CVE-2026-44833
was published
for
snipe/snipe-it
(Composer)
May 8, 2026
Nginx-UI: Cross-Site WebSocket Hijacking (CSWSH) via missing origin validation on all WebSocket endpoints
High
CVE-2026-34403
was published
for
github.com/0xJacky/Nginx-UI
(Go)
Apr 21, 2026
NocoBase Has SQL Injection via template variable substitution in workflow SQL node
High
CVE-2026-34825
was published
for
@nocobase/plugin-workflow-sql
(npm)
Apr 1, 2026
Kimai's API invoice endpoint missing customer-level access control (IDOR)
Moderate
CVE-2026-28685
was published
for
kimai/kimai
(Composer)
Mar 4, 2026
ProTip!
Advisories are also available from the
GraphQL API