GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
6 advisories
Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode
High
GHSA-4jgr-pg2m-m988
was published
for
github.com/dadrus/heimdall
(Go)
Jun 18, 2026
ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components
Low
CVE-2026-55671
was published
for
github.com/zitadel/zitadel
(Go)
Jun 18, 2026
Pimcore has Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restriction
High
CVE-2026-45162
was published
for
pimcore/pimcore
(Composer)
May 27, 2026
Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter
High
CVE-2026-44741
was published
for
pimcore/admin-ui-classic-bundle
(Composer)
May 27, 2026
Weblate: Privilege escalation in the user API endpoint
High
CVE-2026-34393
was published
for
weblate
(pip)
Apr 16, 2026
Graby has stored XSS via iframe srcdoc Attribute in htmLawed Sanitization Config
Low
GHSA-3h6j-9x8m-rg3g
was published
for
j0k3r/graby
(Composer)
Mar 31, 2026
ProTip!
Advisories are also available from the
GraphQL API