GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
5 advisories
DeepSeek TUI: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files
Critical
CVE-2026-45374
was published
for
deepseek-tui
(Rust)
May 14, 2026
DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval
Critical
CVE-2026-45311
was published
for
deepseek-tui
(npm)
May 14, 2026
DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch_url Tool
High
CVE-2026-45310
was published
for
deepseek-tui
(npm)
May 14, 2026
OAuth2-Proxy is vulnerable to header smuggling via underscore leading to potential privilege escalation
High
CVE-2025-64484
was published
for
github.com/oauth2-proxy/oauth2-proxy/v7
(Go)
Nov 12, 2025
Fabio allows HTTP clients to manipulate custom headers it adds
Critical
CVE-2025-48865
was published
for
github.com/fabiolb/fabio
(Go)
May 29, 2025
ProTip!
Advisories are also available from the
GraphQL API