GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
6 advisories
MCP Python SDK: WebSocket server transport does not support Host/Origin validation
High
CVE-2026-59950
was published
for
mcp
(pip)
Jul 16, 2026
Langroid: handle_message() executes user-supplied tool JSON without sender verification
High
CVE-2026-54771
was published
for
langroid
(pip)
Jul 6, 2026
Gogs has a Migration Redirect Bypass that Leads to Internal Repository Theft
High
CVE-2026-52805
was published
for
gogs.io/gogs
(Go)
Jun 23, 2026
n8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant headers are absent or incomplete
High
CVE-2026-45707
was published
for
n8n-mcp
(npm)
May 18, 2026
n8n-MCP: Workflow telemetry sanitizer could retain partial values from URL-shaped node parameters
Moderate
CVE-2026-45582
was published
for
n8n-mcp
(npm)
May 18, 2026
LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists
High
CVE-2026-44843
was published
for
langchain-core
(pip)
May 8, 2026
ProTip!
Advisories are also available from the
GraphQL API