GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
7 advisories
Starlette-Admin's unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS
Moderate
CVE-2026-54553
was published
for
starlette-admin
(pip)
Aug 26, 2026
asteval has a Sandbox Escape via BaseException Subclasses
Moderate
CVE-2026-55244
was published
for
asteval
(pip)
Aug 20, 2026
NiceGUI: Unauthenticated log-volume denial of service in dynamic resource routes
Moderate
CVE-2026-45554
was published
for
nicegui
(pip)
May 18, 2026
Granian vulnerable to DoS via WSGI response header panic
Moderate
CVE-2026-42545
was published
for
granian
(pip)
May 6, 2026
vLLM allows clients to crash the openai server with invalid regex
Moderate
CVE-2025-48943
was published
for
vllm
(pip)
May 28, 2025
vLLM DOS: Remotely kill vllm over http with invalid JSON schema
Moderate
CVE-2025-48942
was published
for
vllm
(pip)
May 28, 2025
ProTip!
Advisories are also available from the
GraphQL API