GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
5 advisories
Budibase: Unanchored Regex in `matchers.ts` Allows CSRF Bypass via Query String Injection in Budibase Worker
Moderate
CVE-2026-48147
was published
for
@budibase/backend-core
(npm)
Jun 12, 2026
Portainer Has an Arbitrary File Read via Git Symlink Injection in Stack Auto-Update
High
CVE-2026-44881
was published
for
github.com/portainer/portainer
(Go)
May 14, 2026
nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)
Low
CVE-2026-44589
was published
for
nuxt-og-image
(npm)
May 7, 2026
dssrf: every IPv6 category bypasses is_url_safe
High
CVE-2026-44232
was published
for
dssrf
(npm)
May 6, 2026
Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass
Moderate
CVE-2026-32695
was published
for
github.com/traefik/traefik/v2
(Go)
Mar 27, 2026
ProTip!
Advisories are also available from the
GraphQL API