GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
11 advisories
Prefect Git Argument Injection in GitRepository Pull Steps
Low
CVE-2026-7725
was published
for
prefect
(pip)
May 4, 2026
Prefect Unauthenticated Event Injection via /api/events/in WebSocket
Moderate
CVE-2026-7723
was published
for
prefect
(pip)
May 4, 2026
Prefect Auth Bypass via endswith() Health Check Exemption
Moderate
CVE-2026-7722
was published
for
prefect
(pip)
May 4, 2026
Prefect SSRF Bypass via DNS Rebinding in validate_restricted_url
Low
CVE-2026-7724
was published
for
prefect
(pip)
May 4, 2026
OpenClaw ACP client has permission auto-approval bypass via untrusted tool metadata
Moderate
CVE-2026-32898
was published
for
openclaw
(npm)
Feb 27, 2026
OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth)
Moderate
CVE-2026-4039
was published
for
openclaw
(npm)
Feb 27, 2026
OpenClaw safeBins file-existence oracle information disclosure
Moderate
CVE-2026-4040
was published
for
openclaw
(npm)
Feb 19, 2026
OpenClaw safeBins stdin-only bypass via sort output and recursive grep flags
Low
CVE-2026-31996
was published
for
openclaw
(npm)
Feb 19, 2026
eBay API MCP Server Affected by Environment Variable Injection
High
CVE-2026-27203
was published
for
ebay-mcp
(npm)
Feb 19, 2026
Fabric.js Affected by Stored XSS via SVG Export
High
CVE-2026-27013
was published
for
fabric
(npm)
Feb 18, 2026
Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization
Moderate
CVE-2026-23946
was published
for
tendenci
(pip)
Jan 21, 2026
ProTip!
Advisories are also available from the
GraphQL API