GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
6 advisories
Uptime Kuma is Missing Authorization Checks on Ping Badge Endpoint, Leaks Ping times of monitors without needing to be on a status page
Moderate
CVE-2026-32230
was published
for
uptime-kuma
(npm)
Mar 12, 2026
OpenClaw: Nostr inbound DMs could trigger unauthenticated crypto work before sender policy enforcement
High
CVE-2026-35627
was published
for
openclaw
(npm)
Mar 26, 2026
Lemur: LDAP Authentication Globally Disables TLS Certificate Verification When LDAP_USE_TLS Is Enabled
Moderate
CVE-2026-44305
was published
for
lemur
(pip)
May 6, 2026
Lemur: LDAP Filter Injection enables post-authentication privilege escalation
High
CVE-2026-44304
was published
for
lemur
(pip)
May 6, 2026
SwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator
Moderate
CVE-2026-28970
was published
for
github.com/apple/swift-nio
(Swift)
Jun 12, 2026
SwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1Codec
Moderate
CVE-2026-28898
was published
for
github.com/apple/swift-nio-http2
(Swift)
Jun 12, 2026
ProTip!
Advisories are also available from the
GraphQL API