GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
9 advisories
Deno: Node TCPWrap numeric hostname aliases bypass --deny-net resolved-IP deny checks
Moderate
CVE-2026-49411
was published
for
deno
(Rust)
Jun 16, 2026
wasmtime-wasi: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction
High
CVE-2026-47261
was published
for
wasmtime-wasi
(Rust)
Jun 5, 2026
BoxLite: Permission Bypass Allows Modification of Read-Only Files
Critical
CVE-2026-46695
was published
for
@boxlite-ai/boxlite
(Go)
May 21, 2026
Local settings bypass config trust checks
High
CVE-2026-35533
was published
for
mise
(Rust)
Apr 7, 2026
Apollo Router Improperly Enforces Renamed Access Control Directives
High
CVE-2025-64347
was published
for
apollo-router
(Rust)
Nov 6, 2025
iFrames Bypass Origin Checks for Tauri API Access Control
Moderate
CVE-2024-35222
was published
for
tauri
(Rust)
May 23, 2024
Wasmer filesystem sandbox not enforced
High
CVE-2023-51661
was published
for
wasmer-cli
(Rust)
Dec 13, 2023
ProTip!
Advisories are also available from the
GraphQL API