GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
8 advisories
EGroupware has Authenticated RCE via Malicious eTemplate Upload
High
CVE-2026-40187
was published
for
egroupware/egroupware
(Composer)
Jul 7, 2026
CI4MS has a Deactivated User Session Bypass (active=0)
Moderate
CVE-2026-41891
was published
for
ci4-cms-erp/ci4ms
(Composer)
May 4, 2026
CI4MS Vulnerable to Arbitrary Database Table Drop via Theme deleteProcess
Moderate
CVE-2026-41890
was published
for
ci4-cms-erp/ci4ms
(Composer)
May 4, 2026
CI4MS has Unrestricted PHP File Upload via Theme Installation that Leads to Authenticated Remote Code Execution
High
CVE-2026-41587
was published
for
ci4-cms-erp/ci4ms
(Composer)
Apr 29, 2026
nginx-ui Vulnerable to DoS via Negative Integer Input in Logrotate Interval
Moderate
CVE-2026-33029
was published
for
github.com/0xJacky/Nginx-UI
(Go)
Mar 30, 2026
nginx-ui has Race Condition that Leads to Persistent Data Corruption and Service Collapse
High
CVE-2026-33028
was published
for
github.com/0xJacky/Nginx-UI
(Go)
Mar 30, 2026
Nginx Configuration Directory Vulnerable to Recursive Deletion via Improper Path Validation
Moderate
CVE-2026-33027
was published
for
github.com/0xJacky/Nginx-UI
(Go)
Mar 30, 2026
nginx-ui Backup Restore Allows Tampering with Encrypted Backups
Critical
CVE-2026-33026
was published
for
github.com/0xJacky/Nginx-UI
(Go)
Mar 30, 2026
ProTip!
Advisories are also available from the
GraphQL API