GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
3 advisories
Dgraph: Unauthenticated /debug/pprof/cmdline discloses admin auth token, enabling unauthorized access to protected Alpha admin endpoints
Critical
CVE-2026-40173
was published
for
github.com/dgraph-io/dgraph
(Go)
Apr 16, 2026
pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass)
High
GHSA-66hx-chf7-3332
was published
for
pyload-ng
(pip)
Apr 14, 2026
pyload-ng has a WebUI JSON permission mismatch that lets ADD/DELETE users invoke MODIFY-only actions
Moderate
CVE-2026-40071
was published
for
pyload-ng
(pip)
Apr 8, 2026
ProTip!
Advisories are also available from the
GraphQL API