GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
3 advisories
FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory
Critical
CVE-2026-48777
was published
for
github.com/gtsteffaniak/filebrowser/backend
(Go)
May 22, 2026
SiYuan Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution
Critical
CVE-2026-45375
was published
for
github.com/siyuan-note/siyuan/kernel
(Go)
May 13, 2026
Grav: Twig sandbox allows editor-role users to exfiltrate all plugin secrets via Config::toArray()
High
CVE-2026-44738
was published
for
getgrav/grav
(Composer)
May 13, 2026
ProTip!
Advisories are also available from the
GraphQL API