GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
4 advisories
Pheditor: Authentication Bypass in Forced Password-Change Flow via Unverified Current Password
Critical
GHSA-f25v-x6vr-962g
was published
for
pheditor/pheditor
(Composer)
Jul 24, 2026
Pheditor: Terminal command-allowlist bypass via argument injection leads to RCE — surviving vector after the metacharacter-sanitization fixes
High
GHSA-g3hq-hphg-8fhh
was published
for
pheditor/pheditor
(Composer)
Jul 24, 2026
motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read
High
CVE-2026-55488
was published
for
motioneye
(pip)
Jun 23, 2026
Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal
High
CVE-2026-54017
was published
for
open-webui
(pip)
Jun 17, 2026
ProTip!
Advisories are also available from the
GraphQL API