GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
6 advisories
Local File Inclusion in Rack::Static
High
CVE-2025-27610
was published
for
rack
(RubyGems)
Mar 10, 2025
Argo Workflows affected by stored XSS in the artifact directory listing
High
CVE-2026-23960
was published
for
github.com/argoproj/argo-workflows
(Go)
Jan 21, 2026
Rack has a Directory Traversal via Rack:Directory
High
CVE-2026-22860
was published
for
rack
(RubyGems)
Feb 17, 2026
Unauthorized access to Argo Workflows Template
High
CVE-2026-28229
was published
for
github.com/argoproj/argo-workflows/v3
(Go)
Mar 11, 2026
Argo vulnerable to exposure of artifact repository credentials
High
CVE-2026-42295
was published
for
github.com/argoproj/argo-workflows/v4
(Go)
May 4, 2026
net-imap vulnerable to STARTTLS stripping via invalid response timing
High
CVE-2026-42246
was published
for
net-imap
(RubyGems)
May 4, 2026
ProTip!
Advisories are also available from the
GraphQL API