GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
4 advisories
Open WebUI has Stored XSS in Pending User Overlay via Incorrect DOMPurify Application Order
Moderate
CVE-2026-44568
was published
for
open-webui
(pip)
May 8, 2026
Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values
Moderate
CVE-2026-35588
was published
for
glances
(pip)
Apr 21, 2026
pyLoad: SSRF in parse_urls API endpoint via unvalidated URL parameter
High
CVE-2026-35187
was published
for
pyload-ng
(pip)
Apr 4, 2026
Nautobot: Management of users via REST API does not apply configured password validators
Low
CVE-2026-34203
was published
for
nautobot
(pip)
Mar 31, 2026
ProTip!
Advisories are also available from the
GraphQL API