GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
5 advisories
Istio: SSRF via RequestAuthentication jwksUri
Moderate
GHSA-fgw5-hp8f-xfhc
was published
for
istio.io/istio
(Go)
Apr 16, 2026
Kyverno: ServiceAccount token leaked to external servers via apiCall service URL
High
GHSA-f9g8-6ppc-pqq4
was published
for
github.com/kyverno/kyverno
(Go)
Apr 16, 2026
PowerShell Command Injection in Podman HyperV Machine
Moderate
CVE-2026-33414
was published
for
github.com/containers/podman/v4
(Go)
Apr 14, 2026
MinIO has JWT Algorithm Confusion in OIDC Authentication
Critical
CVE-2026-33322
was published
for
github.com/minio/minio
(Go)
Mar 19, 2026
Path traversal in Tekton Pipelines git resolver allows reading arbitrary files from the resolver pod
Critical
CVE-2026-33211
was published
for
github.com/tektoncd/pipeline
(Go)
Mar 18, 2026
ProTip!
Advisories are also available from the
GraphQL API