Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
49
GitHub Actions
49
Go
3,518
Maven
5,000+
npm
5,000+
NuGet
911
pip
4,758
Pub
13
RubyGems
1,036
Rust
1,228
Swift
53
Unreviewed advisories
All unreviewed
5,000+

75 advisories

Loading
skilleton has improper input handling in repository/path processing Moderate
GHSA-5g3j-89fr-r2vp was published for skilleton (npm) Apr 8, 2026
Zabbix Agent 2 Docker plugin does not properly sanitize the 'docker.container_info' parameters... Moderate Unreviewed
CVE-2026-23924 was published Mar 24, 2026
Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the... Moderate Unreviewed
CVE-2026-4438 was published Mar 20, 2026
Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which... Moderate Unreviewed
CVE-2003-0907 was published Apr 29, 2022
Argument injection vulnerability in HyperAccess 8.4 allows user-assisted remote attackers to... Moderate Unreviewed
CVE-2006-6597 was published May 1, 2022
OpenClaw's Node system.run approval hardening wrapper semantic drift can execute unintended local scripts Moderate
CVE-2026-29608 was published for openclaw (npm) Mar 3, 2026
tdjackey Credited to tdjackey
Duplicate Advisory: OpenClaw's Node system.run approval hardening wrapper semantic drift can execute unintended local scripts Moderate
GHSA-g87j-gm7p-6vw2 was published for openclaw (npm) Mar 19, 2026 • withdrawn
Argument injection vulnerability in Internet Explorer 6 for Windows XP SP2 allows user-assisted... Moderate Unreviewed
CVE-2006-2056 was published May 1, 2022
Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote... Moderate Unreviewed
CVE-2006-2055 was published May 1, 2022
Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft... Moderate Unreviewed
CVE-2006-4692 was published May 1, 2022
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo... Moderate Unreviewed
CVE-2026-1716 was published Mar 11, 2026
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo... Moderate Unreviewed
CVE-2026-1715 was published Mar 11, 2026
An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in... Moderate Unreviewed
CVE-2026-1717 was published Mar 11, 2026
An improper neutralization of argument delimiters in a command ('argument injection')... Moderate Unreviewed
CVE-2026-25689 was published Mar 10, 2026
A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and... Moderate Unreviewed
CVE-2026-20016 was published Mar 4, 2026
A vulnerability in the CLI of Cisco Secure FTD Software could allow an authenticated, local... Moderate Unreviewed
CVE-2026-20063 was published Mar 4, 2026
Weblate has an argument injection in management console Moderate
CVE-2026-24126 was published for Weblate (pip) Feb 17, 2026
alexb616 Credited to alexb616 and nijel nijel nijel
Tanium addressed a local privilege escalation vulnerability in Tanium Module Server. Moderate Unreviewed
CVE-2025-15315 was published Feb 10, 2026
Tanium addressed a local privilege escalation vulnerability in Tanium Server. Moderate Unreviewed
CVE-2025-15316 was published Feb 10, 2026
Symfony's incorrect argument escaping under MSYS2/Git Bash can lead to destructive file operations on Windows Moderate
CVE-2026-24739 was published for symfony/process (Composer) Jan 28, 2026
Seldaek Credited to Seldaek and nicolas-grekas nicolas-grekas nicolas-grekas
Istio through 1.28.2 allows iptables rule injection for changing firewall behavior via the... Moderate Unreviewed
CVE-2026-23766 was published Jan 15, 2026
An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')... Moderate Unreviewed
CVE-2025-66002 was published Jan 8, 2026
mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files Moderate
CVE-2025-68144 was published for mcp-server-git (pip) Dec 17, 2025
A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a... Moderate Unreviewed
CVE-2025-14946 was published Dec 19, 2025
An improper neutralization of argument delimiters in a command vulnerability has been reported to... Moderate Unreviewed
CVE-2025-62847 was published Dec 16, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database
⚡