GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
9 advisories
Payload: Remote Code Execution through first-register
High
CVE-2026-105858
was published
for
payload
(npm)
Oct 7, 2026
Payload: Bypassed sanitization of user uploaded SVGs
High
CVE-2026-105862
was published
for
payload
(npm)
Oct 7, 2026
Payload: Uploaded XML files could execute same-origin JavaScript
High
CVE-2026-105868
was published
for
payload
(npm)
Oct 7, 2026
Payload Form Builder has an RCE issue
Critical
CVE-2026-105857
was published
for
@payloadcms/plugin-form-builder
(npm)
Oct 7, 2026
Payload: Unauthorized update to collection documents
Critical
CVE-2026-105859
was published
for
payload
(npm)
Oct 7, 2026
Payload authentication token field handling issue
Critical
CVE-2026-105863
was published
for
payload
(npm)
Oct 7, 2026
Payload vulnerable to API key disclosure through ordinary document reads
High
CVE-2026-105849
was published
for
payload
(npm)
Oct 6, 2026
Payload: Field access control bypass on auth collections
Critical
CVE-2026-105851
was published
for
payload
(npm)
Oct 6, 2026
Anubis: Policy bypass via client controlled X-Original-URI header
Moderate
CVE-2026-62314
was published
for
github.com/TecharoHQ/anubis
(Go)
Oct 2, 2026
ProTip!
Advisories are also available from the
GraphQL API