Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,620
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

84 advisories

Loading
Langchain SQL Injection vulnerability Critical
CVE-2023-32785 was published for langchain (pip) Oct 21, 2023
bertuxdeveloper Credited to bertuxdeveloper
NASA AIT-Core vulnerable to remote code execution Critical
CVE-2024-35059 was published for ait-core (pip) May 21, 2024
GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE) High
CVE-2026-69097 was published for gitpython (pip) Jul 24, 2026
ranjiGT Credited to ranjiGT
Duplicate Advisory: GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE) High
GHSA-9xx9-hw38-h2w9 was published for gitpython (pip) Aug 3, 2026 • withdrawn
Duplicate Advisory: Prompt injection in Langflow Smart Transform can lead to code execution Low
GHSA-hhxr-7j22-694r was published for langflow (pip) May 3, 2026 • withdrawn
Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context Critical
CVE-2026-61732 was published for decepticon (pip) Sep 24, 2026
ch1y4n Credited to ch1y4n and wh1t3p1g wh1t3p1g wh1t3p1g
Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie` Low
GHSA-wwv5-g3v4-889x was published for tornado (pip) Sep 1, 2026
sec-reex Credited to sec-reex and arpitjain099 arpitjain099 arpitjain099
aiosmtplib: STARTTLS response injection Moderate
CVE-2026-55558 was published for aiosmtplib (pip) Aug 27, 2026
Flawfinder output manipulation via untrusted filenames and source text High
CVE-2026-48813 was published for flawfinder (pip) Jun 26, 2026
GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE) High
GHSA-jm78-9fvv-mhgr was published for GitPython (pip) Aug 7, 2026
manus-use Credited to manus-use
hermes-agent has an Injection issue Low
CVE-2026-10223 was published for hermes-agent (pip) Jun 1, 2026
hermes-agent has an Injection issue Low
CVE-2026-10222 was published for hermes-agent (pip) Jun 1, 2026
hermes-agent has an Injection issue Moderate
CVE-2026-10221 was published for hermes-agent (pip) Jun 1, 2026
yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output High
CVE-2026-55404 was published for yt-dlp (pip) Jul 24, 2026
gamer191 Credited to gamer191 and bashonly bashonly bashonly
MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler Low
CVE-2026-11529 was published for mysql-mcp-server (pip) Jun 8, 2026
faketut Credited to faketut
yt-dlp: Arbitrary code execution via manifest downloads with aria2c High
CVE-2026-50574 was published for yt-dlp (pip) Jun 16, 2026
seproDev Credited to seproDev, Grub4K, and bashonly Grub4K Grub4K
bashonly bashonly
Aider is vulnerable to Code Injection via editor_coder.run function Low
CVE-2026-10175 was published for aider-chat (pip) May 31, 2026
Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879 Critical
CVE-2026-55615 was published for langroid (pip) Jul 6, 2026
matte1782 Credited to matte1782
Langroid: handle_message() executes user-supplied tool JSON without sender verification High
CVE-2026-54771 was published for langroid (pip) Jul 6, 2026
u-ktdi Credited to u-ktdi
WeasyPrint has CSS Injection via Presentational Hints Moderate
CVE-2026-49452 was published for weasyprint (pip) Jul 6, 2026
AyushParkara Credited to AyushParkara
langchain vulnerable to arbitrary code execution Critical
CVE-2023-36188 was published for langchain (pip) Jul 6, 2023
cookesan Credited to cookesan
hermes-agent has an Injection issue Moderate
CVE-2026-9366 was published for hermes-agent (pip) May 26, 2026
hermes-agent has an Injection issue Moderate
CVE-2026-9353 was published for hermes-agent (pip) May 26, 2026
SAP Cloud SDK for AI Python has OS Command Injection when Program Objects Execution is Enabled High
CVE-2023-25617 was published for sap-ai-sdk-base (pip) Mar 14, 2023
Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering Critical
CVE-2026-44182 was published for jupyter_enterprise_gateway (pip) Jun 3, 2026
ben-elttam Credited to ben-elttam and lresende lresende lresende
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database