GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
5 advisories
Undici has Unbounded Memory Consumption in its DeduplicationHandler via Response Buffering that leads to DoS
Moderate
CVE-2026-2581
was published
for
undici
(npm)
Mar 13, 2026
OpenClaw's `tools.exec.safeBins` PATH-hijack allowed trojan binaries to bypass allowlist checks
High
CVE-2026-32015
was published
for
openclaw
(npm)
Mar 3, 2026
Deno has a Command Injection via Incomplete shell metacharacter blocklist in node:child_process
High
CVE-2026-27190
was published
for
deno
(Rust)
Feb 19, 2026
OpenClaw has an authentication bypass in sandbox browser bridge server
High
CVE-2026-28468
was published
for
openclaw
(npm)
Feb 18, 2026
OpenClaw has a path traversal in browser trace/download output paths may allow arbitrary file writes
High
CVE-2026-28462
was published
for
openclaw
(npm)
Feb 18, 2026
ProTip!
Advisories are also available from the
GraphQL API