GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
7 advisories
n8n Vulnerable to LDAP Filter Injection in LDAP Node
Moderate
CVE-2026-33751
was published
for
n8n
(npm)
Mar 26, 2026
OpenClaw has stored XSS in exported session HTML viewer via markdown/raw-HTML rendering
Moderate
GHSA-r294-2894-92j3
was published
for
openclaw
(npm)
Mar 3, 2026
OpenClaw affected by iMessage remote attachment SCP hardening (strict host-key checks and remoteHost validation)
Moderate
GHSA-2mc2-g238-722j
was published
for
openclaw
(npm)
Mar 3, 2026
OpenClaw vulnerable to path traversal in Feishu media temp-file naming allows writes outside os.tmpdir()
Moderate
CVE-2026-22171
was published
for
openclaw
(npm)
Mar 3, 2026
OpenClaw Vulnerable to HTML injection via unvalidated image MIME type in data-URL interpolation
Low
CVE-2026-32040
was published
for
openclaw
(npm)
Mar 3, 2026
OpenClaw has command injection via Windows shell fallback in Lobster tool execution
High
CVE-2026-32000
was published
for
openclaw
(npm)
Mar 3, 2026
n8n has Potential Remote Code Execution via Merge Node
Critical
CVE-2026-27497
was published
for
n8n
(npm)
Feb 25, 2026
ProTip!
Advisories are also available from the
GraphQL API