GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
3 advisories
Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time
High
CVE-2025-54413
was published
for
skops
(pip)
Jul 25, 2025
Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution
High
CVE-2025-54412
was published
for
skops
(pip)
Jul 25, 2025
Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution
Low
CVE-2025-22151
was published
for
strawberry-graphql
(pip)
Jan 9, 2025
ProTip!
Advisories are also available from the
GraphQL API