GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
4 advisories
GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via malicious .git server
Moderate
CVE-2026-50024
was published
for
githacker
(pip)
Sep 9, 2026
Pagy I18n locale option is not validated before being used in a file path
Moderate
CVE-2026-54659
was published
for
pagy
(RubyGems)
Jul 28, 2026
Oj: Stack Buffer Overflow in Oj::Doc#each_child via Deeply Nested Input
High
CVE-2026-54592
was published
for
oj
(RubyGems)
Jun 19, 2026
Oj: intern.c form_attr (uninitialized stack read)
Moderate
CVE-2026-54500
was published
for
oj
(RubyGems)
Jun 19, 2026
ProTip!
Advisories are also available from the
GraphQL API