GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
7 advisories
ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components
Low
CVE-2026-55671
was published
for
github.com/zitadel/zitadel
(Go)
Jun 18, 2026
NocoDB: Hidden Column Exposure in Public Shared View Endpoints
Moderate
CVE-2026-47378
was published
for
nocodb
(npm)
Jun 5, 2026
@tmlmobilidade/utils has prototype pollution in its setValueAtPath
High
CVE-2026-45325
was published
for
@tmlmobilidade/utils
(npm)
May 18, 2026
parse-nested-form-data has Prototype Pollution via `__proto__` in FormData field names
High
CVE-2026-45302
was published
for
parse-nested-form-data
(npm)
May 18, 2026
form-data-objectizer: Prototype pollution in form-data-objectizer via bracket-notation form keys
High
CVE-2026-46510
was published
for
form-data-objectizer
(npm)
May 18, 2026
@ranfdev/deepobj has a Prototype Pollution vulnerability
High
CVE-2026-46509
was published
for
@ranfdev/deepobj
(npm)
May 14, 2026
@rvf/set-get has a prototype pollution issue that's reachable via @rvf/core preprocessFormData (HTTP form data)
High
CVE-2026-44483
was published
for
@rvf/set-get
(npm)
May 11, 2026
ProTip!
Advisories are also available from the
GraphQL API