GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
5 advisories
Budibase: Workspace-scoped builder escalates to global admin via /api/public/v1/roles/assign
Critical
CVE-2026-48150
was published
for
@budibase/server
(npm)
Jun 12, 2026
rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths
Critical
CVE-2026-45568
was published
for
zrok
(pip)
May 19, 2026
phpMyFAQ has unauthenticated SQL injection via User-Agent header in BuiltinCaptcha
Critical
CVE-2026-46364
was published
for
phpmyfaq/phpmyfaq
(Composer)
May 6, 2026
phpMyFAQ enables unauthenticated 2FA brute-force attack via /admin/check acceptance of arbitrary user-id
Critical
CVE-2026-45010
was published
for
phpmyfaq/phpmyfaq
(Composer)
May 6, 2026
Note Mark: OIDC-registered users authenticated by submitting password "null"
Critical
CVE-2026-41571
was published
for
github.com/enchant97/note-mark/backend
(Go)
Apr 25, 2026
ProTip!
Advisories are also available from the
GraphQL API