GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
5 advisories
Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files
High
CVE-2026-55677
was published
for
github.com/labstack/echo
(Go)
Aug 25, 2026
Hono: Server-Side XSS via JSX Escaping Bypass in cx() Utility
Moderate
CVE-2026-59895
was published
for
hono
(npm)
Jul 21, 2026
Nest: Middleware Bypass on Fastify via Trailing Slash
High
CVE-2026-54281
was published
for
@nestjs/platform-fastify
(npm)
Jun 15, 2026
Symfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes
High
CVE-2026-48489
was published
for
symfony/security-http
(Composer)
Jun 15, 2026
Symfony has Unauthenticated PHP Object Deserialization in MonologBridge server:log Listener
High
CVE-2026-45077
was published
for
symfony/monolog-bridge
(Composer)
May 27, 2026
ProTip!
Advisories are also available from the
GraphQL API