GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
36 advisories
OpenAM: Unauthenticated Authentication Bypass via RADIUS Spoofing
High
CVE-2026-46560
was published
for
org.openidentityplatform.openam:openam-radius
(Maven)
Jun 25, 2026
OpenAM Authentication Bypass via MSISDN LDAP Injection
High
CVE-2026-46619
was published
for
org.openidentityplatform.openam:openam-auth-msisdn
(Maven)
Jun 26, 2026
OpenAM Account Takeover via Unverified Password Change in OAuth2 Module
High
CVE-2026-46623
was published
for
org.openidentityplatform.openam:openam-auth-oauth2
(Maven)
Jun 26, 2026
OpenAM Authenticated RCE via Groovy Sandbox Escape
High
CVE-2026-47424
was published
for
org.openidentityplatform.openam:openam-scripting
(Maven)
Jun 29, 2026
OpenAM OAuth Client Impersonation via JWKS Resolver Cache
High
CVE-2026-47426
was published
for
org.openidentityplatform.openam:openam-oauth2
(Maven)
Jun 29, 2026
OpenAM OAuth Authorization Bypass via PKCE Challenge
Moderate
CVE-2026-48717
was published
for
org.openidentityplatform.openam:openam-oauth2
(Maven)
Jun 29, 2026
veraPDF Validation XXE via XFA
High
CVE-2026-54079
was published
for
org.verapdf:validation-model
(Maven)
Jul 29, 2026
veraPDF Validation XXE via Rich Text
High
CVE-2026-54078
was published
for
org.verapdf:validation-model
(Maven)
Jul 29, 2026
veraPDF Parser DoS via PostScript CMap Streams
Moderate
CVE-2026-54080
was published
for
org.verapdf:parser
(Maven)
Jul 29, 2026
veraPDF Parser DoS via PostScript Type 1 Font Programs
Moderate
CVE-2026-54081
was published
for
org.verapdf:parser
(Maven)
Jul 29, 2026
OpenAM Insecure SSO Cookie Initialization
High
CVE-2026-53660
was published
for
org.openidentityplatform.openam:openam-core
(Maven)
Aug 14, 2026
ProTip!
Advisories are also available from the
GraphQL API