GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
3 advisories
Kysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()`
High
CVE-2026-44635
was published
for
kysely
(npm)
May 11, 2026
Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)
Moderate
CVE-2026-59992
was published
for
next-tinacms-azure
(npm)
Aug 19, 2026
Nodemailer: RFC 5322 comment inside an angle-bracket address is never stripped
Moderate
GHSA-g73g-hqqh-jr95
was published
for
nodemailer
(npm)
Oct 27, 2026
ProTip!
Advisories are also available from the
GraphQL API