GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
3 advisories
OpenRemote has an incomplete fix for CVE-2026-40882: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory
High
CVE-2026-54640
was published
for
io.openremote:openremote-agent
(Maven)
Jul 6, 2026
HAPI FHIR: Incomplete fix for CVE-2026-45367: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoS
High
CVE-2026-55470
was published
for
ca.uhn.hapi.fhir:org.hl7.fhir.convertors
(Maven)
Jun 17, 2026
handlebars.java FileTemplateLoader Path Traversal
High
CVE-2026-55760
was published
for
com.github.jknack:handlebars
(Maven)
Jun 17, 2026
ProTip!
Advisories are also available from the
GraphQL API