GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
7 advisories
DSpace: Path Traversal is possible through LDN message generation
Moderate
CVE-2026-49833
was published
for
org.dspace:dspace-api
(Maven)
Jul 8, 2026
DSpace: ORE resource URI does not validate scheme for non-web resources
Moderate
CVE-2026-49830
was published
for
org.dspace:dspace-api
(Maven)
Jul 8, 2026
DSpace has a possible Path Traversal Vulnerability in its Curation Task Reporter output path
Moderate
CVE-2026-49831
was published
for
org.dspace:dspace-api
(Maven)
Jul 8, 2026
DSpace has possible Remote Code Execution (RCE) through Velocity Templates used by LDN
High
CVE-2026-49832
was published
for
org.dspace:dspace-api
(Maven)
Jul 8, 2026
Yamcs Vulnerable to Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection
Critical
CVE-2026-46621
was published
for
org.yamcs:yamcs-core
(Maven)
May 27, 2026
Yamcs Vulnerable to Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`
Critical
CVE-2026-44632
was published
for
org.yamcs:yamcs-core
(Maven)
May 27, 2026
DSpace is vulnerable to XML External Entity injection during archive imports
Moderate
CVE-2025-53621
was published
for
org.dspace:dspace-api
(Maven)
Jul 15, 2025
ProTip!
Advisories are also available from the
GraphQL API