GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
6 advisories
Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install
High
CVE-2026-35205
was published
for
helm.sh/helm/v4
(Go)
Apr 10, 2026
Helm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory
High
CVE-2026-35204
was published
for
helm.sh/helm/v4
(Go)
Apr 10, 2026
SillyTavern: Path Traversal in `/api/chats/export` and `/api/chats/delete` allows arbitrary file read/delete within user data root
High
CVE-2026-34524
was published
for
sillytavern
(npm)
Apr 1, 2026
SillyTavern has a path traversal in `/api/chats/import` allows arbitrary file write outside intended chat directory
High
CVE-2026-34522
was published
for
sillytavern
(npm)
Apr 1, 2026
Uncontrolled memory allocation via crafted SVG dimensions in @dicebear/converter
High
CVE-2026-29112
was published
for
@dicebear/converter
(npm)
Mar 16, 2026
OneUptime has broken access control in GitHub App installation flow that allows unauthorized project binding
High
CVE-2026-30920
was published
for
@oneuptime/common
(npm)
Mar 9, 2026
ProTip!
Advisories are also available from the
GraphQL API